This vulnerability (CVE-2026-5495) affects Labcenter Electronics Proteus 8.17 SP5 and is caused by an out-of-bounds write during the parsing of PDSPRJ files. The flaw stems from insufficient validation of input data, allowing an attacker to write beyond the allocated buffer. Successful exploitation enables remote code execution within the context of the current process. User interaction is necessary to trigger the vulnerability, such as opening a crafted file or visiting a malicious webpage. The CVSS v3.0 base score is 7.8, reflecting high impact on confidentiality, integrity, and availability. No patch or official remediation guidance has been published as of the vulnerability disclosure date.

If exploited, this vulnerability allows remote attackers to execute arbitrary code on affected systems running Proteus 8.17 SP5. This can lead to full compromise of the application context, potentially allowing attackers to manipulate data, disrupt operations, or gain further access depending on the environment. The requirement for user interaction reduces the likelihood of automated exploitation but does not eliminate risk. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when opening PDSPRJ files from untrusted sources and avoid visiting untrusted web pages that may deliver malicious content targeting this vulnerability. Monitor vendor communications for updates on patches or workarounds.