Siemens Solid Edge Out-of-Bounds Writing Vulnerability (CNVD-2023-09117)

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. An out-of-bounds write vulnerability exists in Siemens Solid Edge due to the Datakit CrossCadWare_x64.dll used in the affected product, which contains out-of-bounds writes beyond the end of the allocated buffer when parsing specially crafted SLDPRT files. . An attacker could exploit this vulnerability to execute code in the context of the current process.