Siemens Femap Buffer Overflow and OOB Read RCE Vulnerabilities

Vulnerability Overview Siemens Femap contains parsing vulnerabilities that attackers can trigger by crafting malicious files, thereby executing arbitrary code in the affected process. Affected Scope Affected Products: Siemens Femap Affected Versions: All versions < V2012.0003 Remediation Fixed Version: Upgrade to V2012.0003 or later Related Links: https://support.sw.siemens.com/product/27565230 Vulnerability Details Vulnerability CVE-2025-12659 Description: A memory corruption vulnerability exists when parsing specially crafted IPT files, potentially leading to code execution. CVSS v3.1 Base Score: 7.8 CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS v4.0 Base Score: 7.3 CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VA:H/SC:H/NI:S/NA:N CWE: CWE-122: Heap-based Buffer Overflow Vulnerability CVE-2025-40936 Description: An out-of-bounds read vulnerability exists when parsing specially crafted IGS files, potentially leading to application crashes or code execution. CVSS v3.1 Base Score: 7.8 CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS v4.0 Base Score: 7.3 CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VA:H/SC:H/NI:S/NA:N CWE: CWE-125: Out-of-bounds Read Additional Information Publication Date: 2026-05-12 Last Update Date: 2026-06-09 Current Version: V1.1 CVSS v3.1 Base Score: 7.8 CVSS v4.0 Base Score: 7.3 Acknowledgments Siemens thanks the following organizations for their contributions to coordinated disclosure: TrendAI Zero Day Initiative Extra Information For more information on security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT: https://www.siemens.com/cert/advisories Historical Data V1.0 (2026-05-12): Publication date V1.1 (2026-06-09): Added CVE-2025-40936 Terms of Use Use of Siemens security advisories is subject to the relevant terms and conditions: https://www.siemens.com/productcert/terms-of-use

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Femap Buffer Overflow and OOB Read RCE Vulnerabilities