CVE-2025-40936

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
7.3HIGH
EPSS
0.0%
top 97.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens Ps/iges Parasolid Translator ComponentSiemens Solid Edge
Timeline
PublishedNov 17

Description

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5siemens/solid_edge< V226.00 Update 03

🔴Vulnerability Details

2
CVEList
CVE-2025-40936: A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29↗2025-11-17
▶
GHSA
GHSA-295f-pwgh-q72q: A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29↗2025-11-17
▶
CVE-2025-40936 (HIGH CVSS 7.3) | A vulnerability has been identified | cvebase.io