CVE-2021-44435

HIGH

Siemens JT Open Toolkit < 11.1.1.0 and JT Utilities < 13.1.1.0 - Stack-based Buffer Overflow via JT File Parsing

Title source: llm
STIX 2.1

Description

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14903)

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0085
EPSS Percentile 75.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-121 CWE-787
Status published
Products (2)
siemens/jt_open_toolkit < 11.1.1.0
siemens/jt_utilities < 13.1.1.0
Published Dec 14, 2021
Tracked Since Feb 18, 2026