SICAM SIAPP SDK OOB Write (preV2.1.7) for Arbitrary Code Execution
CVE-2026-25569 Published on March 10, 2026
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). An out-of-bounds write vulnerability exists in SICAM SIAPP SDK. This could allow an attacker to write data beyond the intended buffer, potentially leading to denial of service, or arbitrary code execution.
Weakness Type
What is a Memory Corruption Vulnerability?
The software writes data past the end, or before the beginning, of the intended buffer. Typically, this can result in corruption of data, a crash, or code execution. The software may modify an index or perform pointer arithmetic that references a memory location that is outside of the boundaries of the buffer. A subsequent write operation then produces undefined or unexpected results.
CVE-2026-25569 has been classified to as a Memory Corruption vulnerability or weakness.
Affected Versions
Siemens SICAM SIAPP SDK:- Before V2.1.7 is affected.