An out-of-bounds read vulnerability (CWE-125) exists in Siemens PS/IGES Parasolid Translator Component and associated products when processing maliciously crafted IGS files. This vulnerability affects all versions prior to V29.0.258 for the Parasolid Translator, prior to V2512.0003 for Simcenter Femap, and prior to V226.00 Update 03 for Solid Edge. Exploitation could lead to application crashes or arbitrary code execution within the context of the affected process. The CVSS 3.1 base score is 7.8, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor advisory or patch links are currently available.

Successful exploitation can result in denial of service (application crash) or remote code execution with the privileges of the current user running the vulnerable application. This impacts confidentiality, integrity, and availability of the affected systems. The vulnerability requires local access (AV:L) and user interaction (UI:R) to trigger.

Patch status is not yet confirmed — check the Siemens vendor advisory for current remediation guidance. Until a patch is available, avoid opening untrusted or specially crafted IGS files in the affected applications. Monitor Siemens communications for updates regarding official fixes.