CVE-2025-23398: Buffer Overflow
A vulnerability has been identified in Teamcenter Visualization V14.3 (All versions < V14.3.0.13), Teamcenter Visualization V2312 (All versions < V2312.0009), Teamcenter Visualization V2406 (All versions < V2406.0007), Teamcenter Visualization V2412 (All versions < V2412.0002), Tecnomatix Plant Simulation V2302 (All versions < V2302.0021), Tecnomatix Plant Simulation V2404 (All versions < V2404.0010). The affected application is vulnerable to memory corruption while parsing specially crafted WRL files. This could allow an attacker to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23398?
CVE-2025-23398 is classified as a medium severity vulnerability.
How do I fix CVE-2025-23398?
To fix CVE-2025-23398, you should upgrade to the latest version of Teamcenter Visualization or Tecnomatix Plant Simulation that is not affected by this vulnerability.
Which versions are affected by CVE-2025-23398?
CVE-2025-23398 affects all versions of Teamcenter Visualization prior to V14.3.0.13 and specific versions of Tecnomatix Plant Simulation.
What products are impacted by CVE-2025-23398?
CVE-2025-23398 impacts Siemens Teamcenter Visualization and Siemens Tecnomatix Plant Simulation.
Is there a workaround for CVE-2025-23398?
There are no documented workarounds for CVE-2025-23398; the recommended action is to update the software.