A vulnerability has been identified in Parasolid V33.1 (All versions  V33.1.262), Parasolid V34.0 (All versions  V34.0.252), Parasolid V34.1 (All versions  V34.1.242), Parasolid V35.0 (All versions  V35.0.161), Simcenter Femap V2022.1 (All versions  V2022.1.3), Simcenter Femap V2022.2 (All versions  V2022.2.2). The affected application is vulnerable to out of bounds read past the end of an allocated buffer when parsing BDF_T files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17533)An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17399)An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17296)An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17756)An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17765)An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-17766)An attacker could

Credit where it's Due

The vulnerability in question was identified by security researcher Chris Froimson.

Timeline

Published on: 09/13/2022 10:15:00 UTC
Last modified on: 09/13/2022 15:14:00 UTC

References