This vulnerability in Labcenter Electronics Proteus 8.17 SP5 is caused by improper validation in the PDSPRJ file parser, leading to an out-of-bounds write (CWE-787). This memory corruption flaw can be triggered remotely if a user opens a crafted PDSPRJ file or visits a malicious page, enabling an attacker to execute arbitrary code within the context of the affected process. The CVSS 3.0 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. The vulnerability was reported by ZDI as ZDI-CAN-25718. No patch or official remediation level has been published yet.

Successful exploitation allows remote attackers to execute arbitrary code with the privileges of the user running Proteus, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability of the system. User interaction is required for exploitation, limiting the attack vector to scenarios involving opening malicious files or visiting malicious web pages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when opening PDSPRJ files from untrusted sources and avoid visiting untrusted web pages that could deliver malicious files. Monitor vendor communications for updates on patches or mitigations.