CVE-2025-40764 — Siemens / Simcenter Femap V2406

CVE-2025-40764

Siemens / Simcenter Femap V2406 PUBLISHED

Description (CNA)

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Siemens / Simcenter Femap V2406	affected 0 before V2406.0003
Siemens / Simcenter Femap V2412	affected 0 before V2412.0002

CWE

CWE-125

References

https://cert-portal.siemens.com/productcert/html/ssa-674084.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.