CVE-2023-38526

Summary

CVE-2023-38526 is a vulnerability in Parasolid versions V34.1, V35.0, and V35.1, as well as Teamcenter Visualization versions V14.1, V14.2, and V14.3. This vulnerability arises from an out-of-bounds read issue when parsing specially crafted X_T files, potentially allowing an attacker to execute code within the current process context. The risk score for this vulnerability is 25, indicating a high severity level with a base score of 7.8 according to the CVSS 3.1 vector string. The affected products include various versions of n_Y-CK, n_Y-CI, n_Y-CJ, srjKED, srjKEC, pMTt2s, n_Y-CG, n_Y-CH, t0Dddo, pMTt2r, n_Y-CF, s9ybcz, srjKD0,srjKDz,srjKDy,srjKDx ,oxmhDp,and t4aRtZ. Organizations using these products should take immediate action to remediate this vulnerability to prevent potential unauthorized code execution and prioritize the security of their systems and data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.