Out of Bounds Read Vulnerability in Simcenter Femap by Siemens
CVE-2025-40764

7.3HIGH

Key Information:

Vendor

Siemens
Status
Simcenter Femap V2406
Simcenter Femap V2412
Vendor
CVE Published:
12 August 2025

What is CVE-2025-40764?

A vulnerability has been discovered in Simcenter Femap versions V2406 and V2412. The flaw arises from an out of bounds read condition when processing specially crafted BMP files. This vulnerability could enable an attacker to execute arbitrary code within the context of the affected application process, potentially leading to unauthorized access or further exploitation of the system.

Affected Version(s)

Simcenter Femap V2406 0

Simcenter Femap V2412 0

References

https://cert-portal.siemens.com/productcert/html/ssa-6740...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-40764 : Out of Bounds Read Vulnerability in Simcenter Femap by Siemens