CVE-2021-44433

HIGH

Siemens JT Open Toolkit < 11.1.1.0 and JT Utilities < 13.1.1.0 - Use-After-Free in JT File Parser

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14900)

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0068
EPSS Percentile 71.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-416
Status published
Products (2)
siemens/jt_open_toolkit < 11.1.1.0
siemens/jt_utilities < 13.1.1.0
Published Dec 14, 2021
Tracked Since Feb 18, 2026