High severity7.8NVD Advisory· Published Nov 17, 2025· Updated Jun 9, 2026

CVE-2025-40936

Description

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Siemens Foundation/Femapllm-create
Range: <V2512.0003
Siemens Foundation/PS/IGES Parasolid Translator Componentllm-fuzzy
Range: <V29.0.258
Siemens Foundation/Solid Edgellm-fuzzy
Range: <V226.00 Update 03

Patches

Vulnerability mechanics

References

cert-portal.siemens.com/productcert/html/ssa-241605.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-445819.htmlnvd
cert-portal.siemens.com/productcert/html/ssa-870926.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000