Description
A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | PS/IGES Parasolid Translator Component | < V29.0.258 | V29.0.258 |
| Siemens | Simcenter Femap | < V2512.0003 | V2512.0003 |
| Siemens | Solid Edge | < V226.00 Update 03 | V226.00 Update 03 |
Advisories 6
- ICSA-26-134-05 Siemens Simcenter Femap CISA ICS & IT advisories · Jul 2, 2026
- SSA-870926 SSA-870926: Datakit and Parasolid Vulnerabilities in Simcenter Femap Siemens ProductCERT · Jun 9, 2026
- ICSA-26-043-05 Siemens Solid Edge CISA ICS & IT advisories · Feb 12, 2026
- NCSC-2026-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 10, 2026
- SSA-445819 SSA-445819: Out of Bounds Read in PS/IGES Parasolid Translator Component in Solid Edge Siemens ProductCERT · Feb 10, 2026
- SSA-241605 SSA-241605: Out of Bounds Read in PS/IGES Parasolid Translator Component Before V29.0.258 Siemens ProductCERT · Nov 17, 2025