CVE-2025-32454

published 2025-05-13

CVE-2025-32454: A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010)…

high 7.3 CVSS 4.0

AV L AC H AT N PR N UI P VC H VI H VA H SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.14), Teamcenter Visualization V2312 (All versions < V2312.0010), Teamcenter Visualization V2406 (All versions < V2406.0008), Teamcenter Visualization V2412 (All versions < V2412.0004), Tecnomatix Plant Simulation V2404 (All versions < V2404.0013). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted WRL files.
This could allow an attacker to execute code in the context of the current process.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
siemens	teamcenter_visualization	>= 14.3 < 14.3.0.14	14.3.0.14
siemens	teamcenter_visualization	>= 2312.0 < 2312.0010	2312.0010
siemens	teamcenter_visualization	>= 2406.0 < 2406.008	2406.008
siemens	teamcenter_visualization	>= 2412.0 < 2412.0004	2412.0004
siemens	teamcenter_visualization_v14.3	< V14.3.0.14	V14.3.0.14
siemens	teamcenter_visualization_v2312	< V2312.0010	V2312.0010
siemens	teamcenter_visualization_v2406	< V2406.0008	V2406.0008
siemens	teamcenter_visualization_v2412	< V2412.0004	V2412.0004
siemens	tecnomatix_plant_simulation	>= 2404.0 < 2404.0013	2404.0013
siemens	tecnomatix_plant_simulation_v2404	< V2404.0013	V2404.0013

CWE-125