Siemens Simcenter Femap Out-of-Bounds Read Vulnerability in BMP File Parsing Allowing Code Execution

A vulnerability allowing out-of-bounds read has been identified in Siemens Simcenter Femap versions 2406 (prior to 2406.0003) and 2412 (prior to 2412.0002). This vulnerability occurs while the application parses specially crafted BMP files, which could enable an attacker to execute code in the context of the current process.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution in the context of the current process.

Remediation

Users are advised to update to Simcenter Femap version 2406.0003 or later for version 2406, and to version 2412.0002 or later for version 2412. For more information, visit the Siemens Support page for Simcenter Femap.