CVE-2025-12659: Heap-based buffer overflow in Siemens Simcenter Femap
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Siemens Simcenter Femapto a version that resolves this vulnerability.Fixed in V2512.0003
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12659?
CVE-2025-12659 is a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-12659?
To fix CVE-2025-12659, users should update to the latest version of Siemens Simcenter Femap provided by Siemens.
What type of vulnerability is CVE-2025-12659?
CVE-2025-12659 is classified as a heap-based buffer overflow vulnerability.
What can an attacker do with CVE-2025-12659?
An attacker can exploit CVE-2025-12659 to execute arbitrary code in the context of the affected application.
What are the affected software products for CVE-2025-12659?
The affected software for CVE-2025-12659 is Siemens Simcenter Femap.