## Summary
Solid Edge contains an out-of-bounds write in its parsing of specially crafted PSM files. This can lead to code execution in the context of the current process when a user opens a malicious file.
## Technical Details
- The issue is a file parsing vulnerability triggered while Solid Edge reads specially crafted files in PAR, PSM, or DFT formats.
- For CVE-2026-50064, the NVD description specifically notes an out of bounds write while parsing specially crafted PSM files.
- Impact includes application crash and potential arbitrary code execution.
## Affected
- Solid Edge SE2025: all versions < V225.0 Update 15
- Solid Edge SE2026: all versions < V226.0 Update 7
## Impact
- Arbitrary code execution in the context of the current process (local attack scenario).
- Potential denial of service via application crash.
## Mitigation
1. Update Solid Edge to the fixed releases recommended by Siemens:
- Solid Edge SE2025: update to V225.0 Update 15 or later.
- Solid Edge SE2026: update to V226.0 Update 7 or later.
2. Treat PSM files as untrusted inputs and avoid opening files from unverified sources.
3. Monitor for unusual behavior after opening PSM files (e.g., unexpected child processes or crashes), and investigate accordingly.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-787