This vulnerability (CWE-125) in Siemens Parasolid V38.0 and V38.1 allows an attacker to trigger an out-of-bounds read during the parsing of maliciously crafted X_T files. Successful exploitation could enable arbitrary code execution within the process context. The affected versions include all releases before V38.0.235 and V38.1.230. The CVSS v3.1 base score is 7.8, indicating high severity with local attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An attacker who can supply specially crafted X_T files to the vulnerable Parasolid versions may cause an out-of-bounds read, potentially leading to arbitrary code execution with the privileges of the running process. This can compromise confidentiality, integrity, and availability of the affected system or application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid processing untrusted X_T files with affected versions of Parasolid. Monitor Siemens advisories for updates.