CVE-2026-64629 is an out-of-bounds read vulnerability (CWE-125) affecting Parasolid V38.0 versions before 38.0.235 and V38.1 versions before 38.1.230. The vulnerability occurs during the parsing of specially crafted X_T files, potentially enabling remote code execution in the context of the current process. The CVSS 3.1 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no exploits are known to be active in the wild.

Successful exploitation could allow an attacker to execute arbitrary code with the privileges of the current process, potentially leading to full compromise of the affected application. The vulnerability impacts confidentiality, integrity, and availability at a high level. However, there are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted or specially crafted X_T files with affected versions of Parasolid to reduce risk.