Dashboard / CVE-2025-40936

CVE-2025-40936

HIGH
MEDIUM Priority: 0.01 BB Relevance: 40/100
Published: 2025-11-17 Modified: 2026-10-23 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: High
PR: None
UI: Passive
S: X
AT: None
VC: High
VI: High
VA: High

Description

A vulnerability has been identified in PS/IGES Parasolid Translator Component (All versions < V29.0.258), Simcenter Femap (All versions < V2512.0003), Solid Edge (All versions < V226.00 Update 03). The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS files. This could allow an attacker to crash the application or execute code in the context of the current process. (ZDI-CAN-26755)

Weakness Classification (1)

References & Advisories (3)

Bug Bounty Relevance

40 / 100
✓ No authentication
✓ Low complexity

CVSS Score

7.3 / 10.0 v4.0
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.20%
Raw Score 0.002030
Percentile 10.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00203
2026-10-28
0.00203

Intelligence Sources

nvd ref →

External Links