CVE-2021-46153

CVE-2021-46153 affects Siemens/SIMCENTER FEMAP V2020.2 and V2021.1, with a memory corruption flaw in NEU file parsing that can lead to arbitrary code execution in the context of the current process. Public advisories (ZDI-22-300/297/298/299) describe remote code execution requiring user interacti...

CVE-2021-37176

CVE-2021-37176 affects Siemens/Siemens Simcenter Femap V2020.2 (All versions) and V2021.1 (All versions). The femap.exe parser for MODFEM files fails to validate user-supplied data, causing an out-of-bounds read past the end of an allocated buffer and enabling information disclosure in the contex...