This vulnerability (CVE-2026-5494) affects Labcenter Electronics Proteus 8.17 SP5 and is caused by an out-of-bounds write (CWE-787) in the processing of PDSPRJ files. The lack of proper input validation allows an attacker to write past the allocated buffer, potentially enabling remote code execution within the context of the application process. Exploitation requires user interaction, such as opening a crafted file or visiting a malicious webpage. The CVSS 3.0 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published as of the vulnerability disclosure date.

Successful exploitation can lead to arbitrary code execution with the privileges of the user running Proteus, potentially compromising system confidentiality, integrity, and availability. The attack requires user interaction, limiting automatic exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDSPRJ files from untrusted sources and avoid visiting untrusted web pages that could trigger the vulnerability. Monitor vendor communications for updates on patches or mitigations.