Multiple File Parsing Vulnerabilities in Parasolid

An attacker can gain code execution on an engineering workstation running Parasolid by tricking a user to open a specially crafted X_B format file. This could compromise design files, steal intellectual property, or inject malicious modifications into CAD models used in industrial designs.

Engineering and design teams at manufacturing, energy, and water utilities that use Parasolid for 3D geometry modeling and CAD operations. Affected industries include equipment manufacturers, automation engineers, and process design groups. The vulnerability requires user interaction (opening a file), making it a risk primarily to engineering workstations rather than runtime control systems.

An attacker crafts a malicious X_B format file (Parasolid's native geometry representation) and delivers it via email, file share, or repository where an engineer would open it. When the engineer opens the file in Parasolid, the out-of-bounds read/write vulnerabilities trigger during file parsing, executing attacker code in the Parasolid process.