CVE-2022-46345

CVE-2022-46345 is an out-of-bounds write in Siemens’ Parasolid parsing of X_B files, enabling code execution in the affected process. Affected products/versions include Parasolid V33.1 (all versions < 33.1.264), V34.0 (all versions < 34.0.252), V34.1 (all versions < 34.1.242), V35.0 (all...

CVE-2022-46346

Summary: CVE-2022-46346 affects Siemens Parasolid (kernel) and related Solid Edge products, caused by an out-of-bounds write while parsing crafted X_B files. This can lead to code execution in the current process context. Affected versions: Parasolid V33.1: all versions < 33.1.264 Parasolid V3...

CVE-2023-28830

CVE-2023-28830 affects Siemens JT2Go and related Solid Edge/Teamcenter Visualization products. A use-after-free vulnerability may be triggered while parsing specially crafted ASM files, potentially allowing code execution in the current process. Affected versions: JT2Go <14.2.0.5; Solid Edge S...

CVE-2023-24552

Summary (fact-based, mode C): Solid Edge SE2022 (all versions) and SE2023 (all versions) are affected by a vulnerability that could allow code execution via an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. The issue is described in CVE-2023-245...

CVE-2023-24555

Solid Edge SE2022 (all versions before V222.0MP12) and SE2023 (all versions before V223.0Update2) are affected by an out-of-bounds read past the end of an allocated structure while parsing specially crafted PAR files, potentially allowing code execution in the process context. MITRE/ATT&CK not ex...