CVE-2026-42953 is an out-of-bounds write vulnerability in Labcenter Proteus 9.1_SP4_Build-42914. The vulnerability allows an attacker to cause the program to write data past the end of an allocated memory buffer, which can result in arbitrary code execution. The CVSS 4.0 vector indicates local attack vector with low complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. No official fix or patch has been disclosed, and no known exploits have been reported.

Successful exploitation can lead to arbitrary code execution on the affected system, compromising confidentiality, integrity, and availability of the application and potentially the host system. The vulnerability requires local access and user interaction, which limits remote exploitation but still poses a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access to the affected version and avoid running untrusted code or files that could trigger the vulnerability. Monitor for vendor updates and apply patches promptly once available.