CVE-2026-23719CWE-122

A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

⚡ A heap-based buffer overflow in Simcenter Femap and Nastran could let crafty attackers run wild with your code! Think of it like a vending machine that accepts any coins, even those that don't belong—if someone slips in a counterfeit coin, they might snag all the snacks inside! If exploited, an attacker could execute arbitrary code in the process's context, leading to data leakages, unauthorized control, or even system crashes. Imagine a hacker turning your engineering application into their personal playground, wreaking havoc without breaking a sweat!

Put simply

Think of it like a vending machine that accepts any coins, even those that don't belong—if someone slips in a counterfeit coin, they might snag all the snacks inside! This vulnerability arises from insufficient bounds checking while parsing specially crafted NDB files, allowing attackers to manipulate memory and potentially execute harmful code.

What to do

If exploited, an attacker could execute arbitrary code in the process's context, leading to data leakages, unauthorized control, or even system crashes. Imagine a hacker turning your engineering application into their personal playground, wreaking havoc without breaking a sweat! To safeguard your systems, upgrade Simcenter Femap and Nastran to version 2512 or later immediately. It's also a great idea to audit your application for any untrusted NDB file usage—protecting your environment is key! You've got this! Patch up your systems and shine bright like the security hero you are! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00151 · 3.9th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512)
    cvelistv5