CVSS 3.1 Score 7.8 of 10 (high)


Published Aug 8, 2023
Updated: Feb 16, 2024
CWE ID 125


CVE-2023-38526 is a vulnerability in Parasolid versions V34.1, V35.0, and V35.1, as well as Teamcenter Visualization versions V14.1, V14.2, and V14.3. This vulnerability arises from an out-of-bounds read issue when parsing specially crafted X_T files, potentially allowing an attacker to execute code within the current process context. The risk score for this vulnerability is 25, indicating a high severity level with a base score of 7.8 according to the CVSS 3.1 vector string. The affected products include various versions of n_Y-CK, n_Y-CI, n_Y-CJ, srjKED, srjKEC, pMTt2s, n_Y-CG, n_Y-CH, t0Dddo, pMTt2r, n_Y-CF, s9ybcz, srjKD0,srjKDz,srjKDy,srjKDx ,oxmhDp,and t4aRtZ. Organizations using these products should take immediate action to remediate this vulnerability to prevent potential unauthorized code execution and prioritize the security of their systems and data.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-38526 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options