CVE-2021-44435

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44433

CVE-2021-44433 relates to a use-after-free in the JTTK library used by Siemens JT Utilities and JT Open Toolkit (JT Utilities: < v13.1.1.0; JTTK:

CVE-2021-44433

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to...

CVE-2021-44432

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to stack based buffer overflow while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the...

CVE-2021-44432

CVE-2021-44432 concerns Siemens JT Utilities and JT Open Toolkit (JTTK). The Red Hat/JV and CISA advisory details a stack-based buffer overflow in the JTTK library when parsing specially crafted JT files, potentially allowing code execution in the context of the current process. Affected products...

CVE-2021-44431

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44430

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

CVE-2021-44431

Summary: CVE-2021-44431 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The issue is an out-of-bounds read past the end of an allocated buffer when parsing specially crafted JT files, enabling potential information leakage in the current process. Affected products: JT Utilities (all vers...

CVE-2021-44430

CVE-2021-44430 affects Siemens JT Utilities and JT Open Toolkit (JTTK): an out-of-bounds write past the end of an allocated structure while parsing specially crafted JT files, enabling potential code execution in the current process. Affected versions are JT Utilities prior to 13.1.1.0 and JTTK p...

CVE-2021-44014

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44014

CVE-2021-44014 affects Siemens JT Open (≤11.1.1.0), JT Utilities (≤13.1.1.0) and Solid Edge (≤2023). The Jt1001.dll contains a use-after-free vulnerability triggered while parsing specially crafted JT files, enabling code execution in the current process. Affected versions require updating to JT ...

CVE-2021-44002

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker t...

CVE-2021-44002

CVE-2021-44002 affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). The Jt1001.dll suffers an out-of-bounds write past an allocated structure while parsing crafted JT files, potentially enabling code execution in the current process. Mitigations from Sie...

Siemens JT Utilities 缓冲区错误漏洞

JT is a publicly released data format developed by Siemens Digital Industry Software.JT Open Toolkit also known as JTTK is developer-oriented application programming interface API JT-enabled software.JT Open Toolkit is a read and write toolkit.JT Utilities and JTTK file parsing vulnerabilities. A...

PT-2021-5458

Name of the Vulnerable Software and Affected Versions JT Utilities versions prior to 13.1.1.0 JTTK versions prior to 11.1.1.0 Description A stack-based buffer overflow issue has been identified in the JTTK library of affected products when parsing specially crafted JT files. This could allow an...

CVE-2021-44444: Out-of-bounds Read

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this...

CVE-2021-44434: Out-of-bounds Write

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products is vulnerable to an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execu...

CVE-2021-44442: Heap-based Buffer Overflow

A vulnerability has been identified in JT Utilities All versions V13.1.1.0, JTTK All versions V11.1.1.0. JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code...

PT-2021-24108

Name of the Vulnerable Software and Affected Versions: JT Utilities versions prior to 13.0.3.0 JTTK versions prior to 11.0.3.0 Description: A vulnerability has been identified in the JTTK library of affected products, which is vulnerable to an out of bounds read past the end of an allocated buffe...

CVE-2021-44002: Out-of-bounds Write

A vulnerability has been identified in JT Open All versions V11.1.1.0, JT Utilities All versions V13.1.1.0, Solid Edge All versions V2023. The Jt1001.dll contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker t...