Out-of-bounds Read in Siemens Jt2go
CVE-2021-44015
A vulnerability has been identified in JT2Go (All versions < V13.2.0.5), Teamcenter Visualization (All versions < V13.2.0.5). The VCRUNTIME140.dll is vulnerable to an out of bounds read past the end of an allocated buffer when parsing spec…
Vulnerability class: Buffer Overflow
EPSS: 0.002 (41.6th percentile) — read the EPSS interpretation.
Affected products
- Siemens Jt2go — versions All versions < V13.2.0.5
- Siemens Teamcenter Visualization — versions All versions < V13.2.0.5
Weakness classification (CWE)
References
- cert-portal.siemens.com/productcert/pdf/ssa-595101.pdf (x_refsource_MISC)
- www.zerodayinitiative.com/advisories/ZDI-22-010/ (x_refsource_MISC)