BaseFortify

Publication date: 2025-11-17

Last updated on: 2026-06-09

Assigner: Siemens AG

Description

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-17

Last Modified

2026-06-09

Generated

2026-07-07

AI Q&A

2025-11-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-40936

EUVD

EUVD-2025-197784

Affected Vendors & Products

Vendor	Product	Version / Range
siemens	parasolid_translator	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out of bounds read issue in the PS/IGES Parasolid Translator Component (all versions before V29.0.258). It occurs when parsing specially crafted IGS files, which can cause the application to crash or allow an attacker to execute code within the context of the current process.

Impact Analysis

The vulnerability can impact you by causing the affected application to crash or potentially allowing an attacker to execute arbitrary code with the same privileges as the application, leading to possible system compromise or disruption of service.

Hi! I’m here to help you understand CVE-2025-40936. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70