What is CVE-2021-38405?

CVE-2021-38405 is a high-severity vulnerability in Siemens Jt2go, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2023-11-21.

How severe is CVE-2021-38405?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Siemens Jt2go

CVE-2021-38405

The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current proc…

Vulnerability class: Buffer Overflow

EPSS: 0.001 (23.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Siemens Jt2go — versions 0
Siemens Teamcenter Visualization — versions 12.4, 13.1, 13.2

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

Frequently asked questions

What is CVE-2021-38405?: CVE-2021-38405 is a high-severity vulnerability in Siemens Jt2go, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2023-11-21.
How severe is CVE-2021-38405?: High severity. CVSS v3 base score is 7.8 out of 10.