CVE-2023-25140

HighCVSS 7.8/10Last modified Oct 23, 2026

Description

A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170), Parasolid V35.1 (All versions < V35.1.150), Solid Edge SE2022 (All versions < V222.0MP12). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Feb 14, 2023
Last modified: Oct 23, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-251417.5Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or earlier) through util CVE-2023-251439.8An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote c CVE-2023-251447.8An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and crea CVE-2023-251457.8A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on CVE-2023-251467.8A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete th CVE-2023-251476.7An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypa CVE-2023-251487.8A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing CVE-2023-251498.8TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During insta CVE-2023-25158.8Mattermost fails to restrict a user with permissions to edit other users and to create personal access tokens from elevating their privilege CVE-2023-251505.7Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tr CVE-2023-251517.5opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of `go.opentelemetry.io/contrib/instrumenta CVE-2023-251528.8Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and dire