This vulnerability (CVE-2026-5493) affects Labcenter Electronics Proteus 8.17 SP5 and is caused by an out-of-bounds write in the PDSPRJ file parser. The root cause is insufficient validation of user input, which permits writing beyond allocated memory buffers. An attacker can exploit this by delivering a crafted PDSPRJ file or malicious web content that a user opens or accesses, enabling remote code execution in the context of the affected application process. The CVSS 3.0 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability, with attack vector local and requiring user interaction.

Successful exploitation allows remote code execution with the privileges of the user running Proteus, potentially leading to full compromise of the affected system. Confidentiality, integrity, and availability of the system are all rated high impact. However, exploitation requires user interaction (opening a malicious file or visiting a malicious page). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — no official fix or patch has been published by Labcenter Electronics at this time. Users should exercise caution when opening PDSPRJ files from untrusted sources and avoid visiting untrusted web pages that could deliver malicious content. Monitor the vendor's advisory channels for updates regarding an official fix or mitigation guidance.