CVE-2022-40638

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40638

CVE-2022-40638 affects Ansys SpaceClaim 2022 R1. The flaw is in parsing of X_B files where code can run without validating whether an object exists, enabling a remote code execution when a user opens a malicious file or visits a malicious page. The issue is a use-after-free-like condition that ca...