Siemens Simcenter Femap V2406 vulnerabilities

CVE-2025-40762 [HIGH] CWE-787 CVE-2025-40762: A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contain an out of bounds write vulnerability when parsing a specially crafted STP file. This could allow an attacker to execute code in the context of the current process.(ZDI-CAN-26692)

CVE-2025-40764 [HIGH] CWE-125 CVE-2025-40764: A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All versions < V2412.0002). The affected applications contains an out of bounds read vulnerability while parsing specially crafted BMP files. This could allow an attacker to execute code in the context of the current process.

CVE-2025-25175 [HIGH] CWE-119 CVE-2025-25175: A vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003), Simcenter A vulnerability has been identified in Simcenter Femap V2401 (All versions < V2401.0003), Simcenter Femap V2406 (All versions < V2406.0002). The affected application contains a memory corruption vulnerability while parsing specially crafted .NEU files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-25443)

CVE-2024-47046 [HIGH] CWE-119 CVE-2024-47046: A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 ( A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to memory corruption while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.

CVE-2024-41981 [HIGH] CWE-122 CVE-2024-41981: A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 ( A vulnerability has been identified in Simcenter Femap V2306 (All versions), Simcenter Femap V2401 (All versions), Simcenter Femap V2406 (All versions). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted BDF files. This could allow an attacker to execute code in the context of the current process.