Siemens Solid Edge Out-of-Bounds Read Vulnerability in PRT File Parsing

A vulnerability allowing out-of-bounds read has been identified in Siemens Solid Edge SE2024 (all versions prior to V224.0 Update 14) and SE2025 (all versions prior to V225.0 Update 6). This vulnerability arises while the application parses specially crafted PRT files, potentially allowing an attacker to crash the application or execute code within the context of the current process.

Impact

Exploitation of this vulnerability could lead to application crashes or arbitrary code execution in the context of the current process.

Remediation

Users are advised to update Solid Edge to version V224.0 Update 14 or later for SE2024, and to version V225.0 Update 6 or later for SE2025. Additionally, Siemens recommends not opening untrusted PRT files in the affected applications.