Siemens Solid Edge Uninitialized Pointer Access Vulnerability Allowing Code Execution

A vulnerability exists in Siemens Solid Edge SE2026, all versions prior to V226.0 Update 5, due to uninitialized pointer access when parsing specially crafted PAR files. This vulnerability could be exploited to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update Solid Edge SE2026 to V226.0 Update 5 or a later version. Additional information can be found on the Siemens Support website.