# CVE-2025-40829: A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected applications contains an…

Source: https://junglewise.ai/threats/cve-2025-40829-a-vulnerability-has-been-identified-in-simcenter-femap-all  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-12  
License: CC BY 4.0 with a link back

CVE-2025-40829 · Severity: high · CVSS 7.8 · Published 2025-12-12

A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected applications contains an uninitialized memory vulnerability while parsing specially crafted SLDPRT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-27146)

Technologies: [Siemens Simcenter Femap](https://junglewise.ai/threats/technologies/simcenter-femap). Vendors: [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2025-40829 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-40829 being exploited in the wild.

**How severe is CVE-2025-40829?** High severity, with a CVSS score of 7.8, published 12 December 2025.

**Which products and versions are affected?** Siemens Simcenter Femap. The advisory does not name versions.

**Is there a fix for CVE-2025-40829?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-40829?** Check whether you run Siemens Simcenter Femap. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Siemens Simcenter Femap

## Related threats

- [Siemens Simcenter Femap out-of-bounds read in BMP parsing](https://junglewise.ai/threats/cve-2026-59701-siemens-simcenter-femap-out-of-bounds-read-in-bmp-parsing)
- [Siemens Simcenter Femap out-of-bounds read in BMP parsing](https://junglewise.ai/threats/cve-2026-59700-siemens-simcenter-femap-out-of-bounds-read-in-bmp-parsing)
- [Siemens Simcenter stack overflow in argument parsing](https://junglewise.ai/threats/cve-2026-59086-siemens-simcenter-stack-overflow-in-argument-parsing)
- [Siemens Simcenter Femap heap overflow in Datakit library](https://junglewise.ai/threats/cve-2025-12659-siemens-simcenter-femap-heap-overflow-in-datakit-library)
- [Siemens Multiple Products improper certificate validation in Analytics Service](https://junglewise.ai/threats/cve-2025-40745-siemens-multiple-products-improper-certificate-validation-in)