CVE-2025-12659: Heap-based buffer overflow in Siemens Simcenter Femap
Published May 12, 2026
·Updated
Siemens Simcenter Femap contains a memory corruption vulnerability while parsing specially crafted IPT files. This could allow an attacker to execute code in the context of the current process.
Affected Software
1 affected component
Siemens Simcenter Femap
Remediation
Information
Update to V2512.0003 or later version
https://support.sw.siemens.com/product/275652363/
Event History
May 12, 2026
CVE Published
via MITRE·12:30 PM
Data Sourced
via MITRE·12:30 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-12659?
CVE-2025-12659 is a high-severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-12659?
To fix CVE-2025-12659, users should update to the latest version of Siemens Simcenter Femap provided by Siemens.
3
What type of vulnerability is CVE-2025-12659?
CVE-2025-12659 is classified as a heap-based buffer overflow vulnerability.
4
What can an attacker do with CVE-2025-12659?
An attacker can exploit CVE-2025-12659 to execute arbitrary code in the context of the affected application.
5
What are the affected software products for CVE-2025-12659?
The affected software for CVE-2025-12659 is Siemens Simcenter Femap.