Simcenter Femap V<2306 Uninitialized Pointer in Catia MODEL Parsing
CVE-2024-24925 Published on February 13, 2024

A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted Catia MODEL files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-22060)

NVD

Weakness Type

Access of Uninitialized Pointer

The program accesses or uses a pointer that has not been initialized.


Products Associated with CVE-2024-24925

Want to know whenever a new CVE is published for Siemens Simcenter Femap? stack.watch will email you.

 

Affected Versions

Siemens Simcenter Femap: siemens simcenter_femap:

Exploit Probability

EPSS
0.10%
Percentile
26.45%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.