CVE-2026-23719 — Heap-based Buffer Overflow in Siemens Simcenter Femap

CWE-122 — Heap-based Buffer Overflow4 documents4 sources
Severity
7.3HIGHNVD
EPSS
0.0%
top 99.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Siemens Simcenter FemapSiemens Simcenter Nastran
Timeline
PublishedFeb 10

Description

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the current process.

CVSS vector

CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Packages4 packages

▶CVEListV5siemens/simcenter_femap< V2512
▶NVDsiemens/simcenter_femap< 2512.0000
▶CVEListV5siemens/simcenter_nastran< V2512
▶NVDsiemens/simcenter_nastran< 2512.0000

🔴Vulnerability Details

2
GHSA
GHSA-qcf6-35q9-jph6: A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)↗2026-02-10
▶
CVEList
CVE-2026-23719: A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)↗2026-02-10
▶

🕵️Threat Intelligence

1
Wiz
CVE-2026-23719 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2026-23719 — Heap-based Buffer Overflow in Siemens | cvebase