CVE-2022-40649

CVE-2022-40649 affects Ansys SpaceClaim 2022 R1. The vulnerability stems from parsing X_B files where a pointer is not properly initialized, enabling a remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and is actionable in ...

CVE-2022-40648

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40648

CVE-2022-40648 affects Ansys SpaceClaim 2022 R1. The vulnerability resides in the parsing of X_B files, where insufficient validation leads to a write before the start of an allocated data structure, enabling arbitrary code execution. Exploitation requires user interaction (visit a malicious page...

CVE-2022-40647

CVE-2022-40647 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing X_B files, caused by insufficient validation, leading to an out-of-bounds read that can allow code execution in the target process. User interaction is required (target must open a malicious file/page). Multiple sources refer...

CVE-2022-40646

CVE-2022-40646 affects Ansys SpaceClaim 2022 R1. The root cause is an uninitialized pointer during parsing of X_B files, allowing remote code execution when a user visits a malicious page or opens a malicious file. Exploitation requires user interaction and can execute code in the context of the ...

CVE-2022-40645

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40643

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40642

CVE-2022-40642 affects Ansys SpaceClaim 2022 R1. The vulnerability is in the parsing of X_B files and arises from a lack of proper initialization of a pointer before use, allowing remote code execution with user interaction required (target must open a malicious page or file). Documented by ZDI a...

CVE-2022-40642

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40641

CVE-2022-40641 affects Ansys SpaceClaim 2022 R1. The issue is an out-of-bounds write in the parsing of X_B files, caused by inadequate validation of user-supplied data, which can allow code execution in the context of the current process. Exploitation requires user interaction (the target must vi...

CVE-2022-40640

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40638

CVE-2022-40638 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files where code can run without validating whether an object exists, enabling a remote code execution when a user opens a malicious file or visits a malicious page. The issue is a use-after-free-like condition that ca...

CVE-2022-40637

This CVE-2022-40637 affects Ansys SpaceClaim 2022 R1 and involves a JT file parsing flaw. The root cause is failure to validate the existence of an object before performing operations on it, enabling an attacker to achieve remote code execution with the current process context after user interact...

CVE-2022-40637

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40636

CVE-2022-40636 affects Ansys SpaceClaim 2022 R1. The root cause is a parsing flaw in JT files that allows reading beyond allocated buffers, enabling remote code execution. Exploitation requires user interaction (target visits a malicious page or opens a malicious file). The vulnerability is docum...

CVE-2022-39155

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39141

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.262, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.161, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. Th...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...