CVE-2021-44432

HIGH

Siemens JT Open Toolkit < 11.1.1.0 and JT Utilities < 13.1.1.0 - Stack-based Buffer Overflow in JT File Parser

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14845)

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0085
EPSS Percentile 75.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-121
Status published
Products (2)
siemens/jt_open_toolkit < 11.1.1.0
siemens/jt_utilities < 13.1.1.0
Published Dec 14, 2021
Tracked Since Feb 18, 2026