CVE-2023-32288

Name of the Vulnerable Software and Affected Versions TELLUS version 4.0.15.0 TELLUS Lite version 4.0.15.0

Description An out-of-bounds read issue exists, potentially leading to information disclosure and/or arbitrary code execution when opening a specially crafted SIM file.

Recommendations For TELLUS version 4.0.15.0, avoid opening specially crafted SIM files until a patch is available. For TELLUS Lite version 4.0.15.0, avoid opening specially crafted SIM files until a patch is available. As a temporary workaround, consider restricting the use of SIM file handling functionality in both TELLUS and TELLUS Lite until a fix is provided.