PT-2025-41890 · Siemens · Solid Edge Se2025+1

Published 2025-10-14 · Updated 2025-10-14 · CVE-2025-40812

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Solid Edge SE2024 versions prior to V224.0 Update 14 Solid Edge SE2025 versions prior to V225.0 Update 6

Description The application contains an out of bounds read vulnerability while parsing specially crafted PRT files. This could allow an attacker to crash the application or execute code in the context of the current process. The vulnerability occurs when the application reads data beyond the allocated buffer boundaries during the parsing of a malicious PRT file. PRT files are 3D model files used within the application.

Recommendations Update Solid Edge SE2024 to version V224.0 Update 14 or later. Update Solid Edge SE2025 to version V225.0 Update 6 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-40812

Affected Products

Solid Edge Se2024

Solid Edge Se2025

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-40812 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40812 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-541582.html · Vendor Advisory
• https://twitter.com/CVEnew/status/1978032041426857989 · Twitter Post
• https://t.me/CVEtracker/34856 · Telegram Post
• https://twitter.com/CveTodo/status/1978049648058093984 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1978046407933120838 · Twitter Post