PT-2025-47142 · Unknown · Ps/Iges Parasolid Translator

Published 2025-11-17 · Updated 2026-02-12 · CVE-2025-40936

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PS/IGES Parasolid Translator Component versions prior to 29.0.258

Description The PS/IGES Parasolid Translator Component contains an out-of-bounds read issue when processing specifically designed IGS files. This could potentially allow an attacker to cause the application to crash or to execute code with the privileges of the current process.

Recommendations Update to version 29.0.258 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-00050

CVE-2025-40936

ZDI-25-1042

Affected Products

Ps/Iges Parasolid Translator

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2025-40936 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-25-1042 · Security Note
• https://bdu.fstec.ru/vul/2026-00050 · Security Note
• https://twitter.com/CVEnew/status/1990387099019739585 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-241605.html · Note
• https://cert-portal.siemens.com/productcert/html/ssa-445819.html · Note
• https://zerodayinitiative.com/advisories/upcoming · Note
• https://twitter.com/VulmonFeeds/status/1990398311648342053 · Twitter Post
• https://cert-portal.siemens.com/productcert/html/ssa-870926.html · Note
• https://twitter.com/cracbot/status/1992186358191002048 · Twitter Post
• https://t.me/CVEtracker/37492 · Telegram Post
• https://twitter.com/ThreatSynop/status/2022014314987561230 · Twitter Post