Siemens PS/IGES Parasolid Translator Component Out-of-Bounds Read Vulnerability Allowing Application Crash or Code Execution

A vulnerability exists in the PS/IGES Parasolid Translator Component, affecting all versions prior to 29.0.258. The issue is an out-of-bounds read vulnerability that occurs when the application parses specially crafted IGS files. This vulnerability could be exploited to crash the application or execute code within the context of the current process.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can cause the application to crash or allow arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to version 29.0.258 or later. The latest version can be downloaded from the Siemens FTP site.