CVE-2022-40648

CVE-2022-40648 is a remote code execution vulnerability affecting Ansys SpaceClaim 2022 R1, stemming from improper validation of user-supplied data when parsing X_B files. Exploitation requires user interaction, where a target must open a malicious file or visit a malicious page. With a CVSS score of 7.8 (High), successful exploitation could lead to arbitrary code execution in the context of the current process. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.