CVE-2021-34299

Summary: CVE-2021-34299 affects Siemens JT2Go and Teamcenter Visualization prior to version 13.2. The vulnerability lies in the Tiff_loader.dll which fails to validate user-supplied data when parsing TIFF files, causing an out-of-bounds read that can leak information within the current process. T...

CVE-2021-34298

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing BMP files. An attack...

CVE-2021-34298

CVE-2021-34298 affects Siemens JT2Go and Teamcenter Visualization (versions prior to 13.2). The BMP_Loader.dll parses BMP files and lacks proper validation, enabling an attacker to execute code in the current process with local, likely remoteом? exploitation described by ZDI—double free in BMP pa...

CVE-2021-34297

Siemens JT2Go and Teamcenter Visualization are affected by CVE-2021-34297. The BMP_Loader.dll in these products (All versions

CVE-2021-34297

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds write past the end of an...

CVE-2021-34296

CVE-2021-34296 affects Siemens JT2Go (all versions < 13.2) and Teamcenter Visualization (all versions

CVE-2021-34295

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an...

CVE-2021-34295

VULNERABILITY SUMMARY (CVE-2021-34295): Siemens JT2Go and Teamcenter Visualization are affected (versions prior to 13.2). The Gif_loader.dll parsing GIFs lacks proper validation, causing an out-of-bounds write that can enable code execution in the context of the current process. Exploitation deta...

CVE-2021-34294

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds read past the end of an...

CVE-2021-34294

Siemens JT2Go (all versions before 13.2) and Teamcenter Visualization (all versions before 13.2) are affected by a GIF loader parsing issue in Gif_loader.dll that can cause out-of-bounds reads (and related out-of-bounds writes in other loaders) when processing GIF files. The root cause is imprope...

CVE-2021-34293

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an...

CVE-2021-34293

CVE-2021-34293 affects Siemens JT2Go (all versions < 13.2) and Teamcenter Visualization (all versions

CVE-2021-34292

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Tiffloader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an...

CVE-2021-34292

Siemens JT2Go (all versions before 13.2) and Teamcenter Visualization (all versions before 13.2) are affected by an out-of-bounds read in the TIFF parsing path. The Tiff_loader.dll fails to validate user-supplied data when processing TIFF files, which could allow code execution in the context of ...

CVE-2021-34291

Siemens JT2Go (before 13.2) and Teamcenter Visualization (before 13.2) are affected by CVE-2021-34291 due to Gif_loader.dll failing to validate GIF data, causing an out-of-bounds write that could allow code execution in the current process. Connected sources confirm the vulnerability in GIF parsi...

CVE-2021-34291

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Gifloader.dll library in affected applications lacks proper validation of user-supplied data when parsing GIF files. This could result in an out of bounds write past the end of an...

Siemens JT2GO and Siemens Teamcenter Visualization buffer error vulnerabilities

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A heap buffer overflow vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

CVE-2021-34333: Double Free

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in double free of an allocated...

CVE-2021-34330: Use After Free

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The Jt981.dll library in affected applications lacks proper validation of user-supplied data prior to performing further free operations on an object when parsing JT files. An attacker...

CVE-2021-34326: Heap-based Buffer Overflow

A vulnerability has been identified in JT2Go All versions V13.2, Solid Edge SE2021 All Versions SE2021MP5, Teamcenter Visualization All versions V13.2. The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could resul...