CVE-2026-64629

Awaiting Analysis Awaiting Analysis - Queue

Heap-based Buffer Overflow in Parasolid While Parsing X_T Files

Publication date: 2026-08-11

Last updated on: 2026-08-28

Assigner: siemens-SADP

Description

A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230). The affected applications contains an out of bounds read vulnerability while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-28

Generated

2026-11-08

AI Q&A

2026-08-11

EPSS Evaluated

2026-11-07

NVD

CVE-2026-64629

EUVD

EUVD-2026-56124

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	parasolid	to 38.0.235 (exc)
siemens	parasolid	to 38.1.230 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read issue in Parasolid software versions V38.0 and V38.1. It occurs when the application processes specially crafted X_T files, potentially allowing attackers to execute arbitrary code or crash the application by reading memory outside intended boundaries.

Detection Guidance

Detecting this vulnerability requires checking the installed version of Parasolid against the patched versions (V38.0.235 or later for V38.0 and V38.1.230 or later for V38.1). No specific commands are provided in the resources, but you can verify the version through the application's interface or configuration files.

Impact Analysis

If exploited, this vulnerability could let attackers run malicious code on your system, potentially leading to data theft, system damage, or unauthorized access. It requires user interaction, such as opening a maliciously crafted X_T file, to trigger.

Compliance Impact

This vulnerability could lead to unauthorized code execution or crashes in systems using Parasolid, potentially exposing sensitive data. Such incidents may violate compliance requirements under GDPR (data protection) or HIPAA (health information security) if exploited, leading to data breaches or unauthorized access.

Mitigation Strategies

Immediately update Parasolid to V38.0.235 or later for V38.0 and V38.1.230 or later for V38.1. Siemens also recommends protecting network access to devices and following operational security guidelines.

Hi! I’m here to help you understand CVE-2026-64629. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...