Siemens Simcenter Femap contains a heap-based buffer overflow vulnerability (CWE-122) triggered by parsing specially crafted IPT files. This memory corruption issue can lead to arbitrary code execution in the context of the current process. The CVSS 4.0 vector indicates local attack vector, high complexity, no privileges required, but user interaction is needed. The vulnerability impacts confidentiality, integrity, and availability with high severity. No patch or official remediation level has been provided by the vendor as of the published date.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code with the privileges of the user running Simcenter Femap. This could lead to compromise of the affected system's confidentiality, integrity, and availability. However, exploitation requires local access, high attack complexity, and user interaction, which limits the ease of exploitation. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening untrusted IPT files and restrict access to the application to trusted users only. Monitor Siemens advisories for updates regarding patches or mitigations.