A flaw in the processing of XDB files in Simcenter Femap and Simcenter Nastran allows an out-of-bounds read, which can be leveraged to execute arbitrary code within the context of the current process. This vulnerability can compromise confidentiality, integrity, or availability of the affected system. The issue is classified as a type of memory access error.

The affected products are Siemens Simcenter Femap and Siemens Simcenter Nastran, with all versions older than V2512 encountering this flaw.

The CVSS score is 7.3, indicating a high severity, while the EPSS score of less than 1% shows that exploitation is currently considered unlikely. The vulnerability is not listed in the CISA KEV catalog. Based primarily on the description, the likely attack vector involves an attacker delivering a specially crafted XDB file to the target application, either locally or over a network, to trigger the out-of-bounds read and gain code‑execution privileges.