CVE-2025-40764

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.

Score

CVSS 3.1 7.8 High

Status

Analyzed - productcert@siemens.com

Published

2025-08-12

Last modified

2025-08-12

Weaknesses

CWE-125

Affected products

• Simcenter Femap (Siemens)
• Simcenter Femap V2406 (Siemens)
• Simcenter Femap V2412 (Siemens)

References

• https://cert-portal.siemens.com/productcert/html/ssa-674084.html