CVE-2021-34298

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attack...

CVE-2021-34298

CVE-2021-34298 affects Siemens JT2Go and Teamcenter Visualization (versions prior to 13.2). The BMP_Loader.dll parses BMP files and lacks proper validation, enabling an attacker to execute code in the current process with local, likely remoteом? exploitation described by ZDI—double free in BMP pa...