CNNVD-202511-1917 Information

CNNVD ID

CNNVD-202511-1917

CVE-2025-40936

  • CNNVD Published: 2025-11-17

Description (Chinese)

Siemens PS/IGES Parasolid Translator Component是德国Siemens公司的一个翻译组件。 Siemens PS/IGES Parasolid Translator Component V29.0.258之前版本存在缓冲区错误漏洞,该漏洞源于解析特制IGS文件时存在越界读取漏洞,可能导致应用程序崩溃或执行任意代码。

Description (English)

Siemens PS/IGES Parasolid Translator Component is a translation component of the German company Siemens. The previous version of Siemens PS/IGES Parasolid Translator Component V29.0.258 had an error loophole in the buffer zone, resulting from a cross-border reading gap in the analysis of the IGS file, which could lead to a breakdown of the application or the implementation of any code.

Hazard Level

Medium

Vulnerability Type

缓冲区错误

Affected Vendor

西门子

Published

2025-11-17

Last Modified

2026-02-24

References

https://cert-portal.siemens.com/productcert/html/ssa-241605.html https://cert-portal.siemens.com/productcert/html/ssa-445819.html https://access.redhat.com/security/cve/cve-2025-40936

Patch

https://cert-portal.siemens.com/productcert/html/ssa-241605.html

Share on: