Siemens Femap Out-of-bounds Read in BMP Parsing (CVE-2026-59700/59701) Security Advisory

Vulnerability Overview Siemens Femap contains two file parsing vulnerabilities that may be triggered when the application reads files in BMP format. If a user is tricked into opening a malicious file, this could result in application crashes or potentially arbitrary code execution. Affected Scope Affected Products and Versions: - Siemens Femap - All versions < V2606.0001 - Affected by Remediation Mitigation Measures: - Upgrade to V2606.0001 or later - For more information, visit: https://support.sw.siemens.com/product/2756528 Vulnerability Description Vulnerability CVE-2026-59700 Description: - The affected application contains an out-of-bounds read vulnerability that may be triggered when parsing a specially crafted BMP file. This could allow an attacker to execute code within the context of the current process. - CVSS v3.1 Base Score: 7.8 - CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS v4.0 Base Score: 7.3 - CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:R/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CWE: CWE-125: Out-of-bounds Read Vulnerability CVE-2026-59701 Description: - The affected application contains an out-of-bounds read vulnerability that may be triggered when parsing a specially crafted BMP file. This could allow an attacker to execute code within the context of the current process. - CVSS v3.1 Base Score: 7.8 - CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - CVSS v4.0 Base Score: 7.3 - CVSS v4.0 Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:R/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - CWE: CWE-125: Out-of-bounds Read Additional Information General Security Recommendations: - Secure network access devices using appropriate mechanisms. - Configure the environment according to Siemens Industrial Security Operation Guidelines. - Follow the recommendations provided in the product manuals. - For more information, visit: https://www.siemens.com/industrial-security Acknowledgments: - Thanks to Michael Henz for the report and coordinated disclosure. Further Information: - For further inquiries regarding security vulnerabilities in Siemens products and solutions, please contact Siemens ProductCERT: https://www.siemens.com/cert/advisories History: - V1.0 (2026-08-11): Release date Terms of Use: - The use of Siemens security advisories is subject to the terms and conditions listed at https://www.siemens.com/productcert/terms-of-use.

Goal Reached Thanks to every supporter — we hit 100%!

Siemens Femap Out-of-bounds Read in BMP Parsing (CVE-2026-59700/59701) Security Advisory