CVE-2021-44444

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15052)

Affected products

Jt Utilities, Jttk

Siemens Jt Open Toolkit

< 11.1.1.0

Siemens Jt Utilities

< 13.1.1.0

Fix

Available

CVSS 2.0

4.3 MEDIUM

CVSS 3.1

3.3 LOW

EPSS

1.1% (63th percentile)

Weakness

CWE-125

NVD status

Modified

Published

2021-12-14