high7.8
CVE-2024-54091
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3).
Impact
A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 12), Solid Edge SE2025 (All versions < V225.0 Update 3). The affected application contains an out of bounds write past the end of an allocated buffer while parsing X_T data or a specially crafted file in X_T format. This could allow an attacker to execute code in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Parasolid | from 36.1 before 36.1.225 from 37.0 before 37.0.173 |
| Siemens | Solid Edge Se2024 | All versions Version 224.0 |
| Siemens | Solid Edge Se2025 | All versions Version 225.0 |