X_T File Parsing Vulnerabilities in Parasolid

An attacker could trick a design engineer into opening a malicious X_T file, leading to code execution with the privileges of the application or causing the design application to crash and stop work.

Design engineers and CAD users at manufacturing facilities, automotive suppliers, and engineering firms who use Parasolid for 3D modeling and geometric computation. Anyone who receives X_T files from untrusted or potentially compromised sources and opens them in Parasolid.

An attacker creates a malicious X_T format file with crafted data that triggers an out of bounds read or null pointer dereference when Parasolid parses the file. The attacker sends this file to a user (e.g., via email or a shared repository) and tricks them into opening it with Parasolid. The vulnerability executes in the context of the logged-in user running Parasolid.