CVE-2025-23396

Summary

CVE-2025-23396 is a newly identified vulnerability that affects various versions of Teamcenter Visualization (V14.3, V2312, V2406, V2412) and Tecnomatix Plant Simulation (V2302, V2404). These applications contain an out-of-bounds write vulnerability while parsing a maliciously crafted WRL file. An attacker can exploit this issue to write arbitrary data beyond the intended memory boundaries, potentially leading to code execution in the context of the current process. Users of the mentioned applications are advised to upgrade to thepatched versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.