A buffer overflow occurs when the Proteus program processes improperly crafted PDSPRJ files. The flaw arises from missing validation of user data, leading to an out‑of‑bounds write that allows an attacker to run code in the context of the current process. This weakness aligns with CWE‑787.

The vulnerability affects the Proteus software distributed by Labcenter Electronics. No specific product versions are enumerated in the available data.

The CVSS score of 7.8 indicates a high severity, and although an EPSS score is not available, the lack of a KEV listing suggests it has not yet been observed in the wild. The requirement for a user to open a malicious file or visit a malicious page means that exploitation requires some level of user interaction.