CVE-2022-40644

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

CVE-2022-40644

CVE-2022-40644 involves Ansys SpaceClaim 2022 R1 where the X_B file parser lacks proper validation, causing an out-of-bounds write and enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The issue is tied to ZDI-CAN-17408...