CVE-2022-47935

The CVE-2022-47935 issue affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). Root cause: a memory corruption vulnerability in Jt1001.dll when parsing specially crafted JT files, enabling code execution in the attacker’s context. Affects: JT Open, JT Uti...

CVE-2021-44014

CVE-2021-44014 affects Siemens JT Open (≤11.1.1.0), JT Utilities (≤13.1.1.0) and Solid Edge (≤2023). The Jt1001.dll contains a use-after-free vulnerability triggered while parsing specially crafted JT files, enabling code execution in the current process. Affected versions require updating to JT ...

CVE-2021-44444

The CVE-2021-44444 issue affects Siemens JT Utilities and JTTK. Affected versions are JT Utilities < 13.1.1.0 and JTTK

CVE-2022-41851

Siemens JT Open Toolkit (JTTK) and Simcenter Femap are affected by CVE-2022-41851 due to an uninitialized pointer reference when parsing specially crafted JT files. Affected versions: JTTK < 11.1.1.0; Simcenter Femap < 2022.1.3 (V2022.1) and

CVE-2021-44002

CVE-2021-44002 affects Siemens JT Open (pre-11.1.1.0), JT Utilities (pre-13.1.1.0), and Solid Edge (pre-2023). The Jt1001.dll suffers an out-of-bounds write past an allocated structure while parsing crafted JT files, potentially enabling code execution in the current process. Mitigations from Sie...

CVE-2022-47936

Siemens JT Open Toolkit, JT Utilities, and Parasolid are affected by a stack-based overflow while parsing specially crafted JT files. Affected versions: JT Open <11.2.3.0, JT Utilities <13.2.3.0, Parasolid <34.0.252 (V34.0), <34.1.242 (V34.1), <35.0.170 (V35.0),

CVE-2023-29053

Summary: CVE-2023-29053 affects Siemens JT Open (all versions before 11.3.2.0) and JT Utilities (all versions before 13.3.0.0). The vulnerability is an out-of-bounds read past the end of an allocated structure while parsing specially crafted JT files, which could allow code execution in the conte...

CVE-2021-44432

CVE-2021-44432 concerns Siemens JT Utilities and JT Open Toolkit (JTTK). The Red Hat/JV and CISA advisory details a stack-based buffer overflow in the JTTK library when parsing specially crafted JT files, potentially allowing code execution in the context of the current process. Affected products...

CVE-2021-44449

CVE-2021-44449 affects Siemens JT Utilities (all versions prior to v12.8.1.1) and JT Open Toolkit/JTTK (all versions prior to v10.8.1.1). The JTTK library contains an out-of-bounds write past the end of an allocated structure when parsing specially crafted JT files, enabling code execution in the...

CVE-2022-47977

CVE-2022-47977 affects Siemens JT Open Toolkit (all versions before 11.2.3.0) and JT Utilities (all versions before 13.2.3.0). The issue is a memory corruption vulnerability encountered while parsing specially crafted JT files, which could allow code execution in the context of the current proces...

CVE-2023-30796

CVE-2023-30796 concerns an out-of-bounds read while parsing specially crafted JT files in Siemens JT Open (all versions < V11.4) and JT Utilities (all versions

CVE-2021-44436

Siemens JT Utilities (all versions prior to 13.1.1.0) and JT Open Toolkit (JTTK) (all versions prior to 11.1.1.0) contain an out-of-bounds read vulnerability in JT file parsing that could leak information within the running process. The issue is documented under CVE-2021-44436 and related entries...

CVE-2021-44445

CVE-2021-44445 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The JTTK library in affected products is vulnerable to an out-of-bounds write past the end of a fixed-length heap-based buffer while parsing specially crafted JT files, enabling potential arbitrary code execution in the proce...

CVE-2021-44437

Summary: CVE-2021-44437 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The JTTK library in affected products is vulnerable to an out-of-bounds write past the end of an allocated structure while parsing specially crafted JT files, potentially allowing code execution in the context of the...

CVE-2021-44440

CVE-2021-44440 affects Siemens JT Utilities (pre-13.1.1.0) and JT Open Toolkit/JTTK (pre-11.1.1.0). The JTTK parsing code is vulnerable to memory corruption, enabling possible code execution in the running process when handling specially crafted JT files. Siemens/ZX advisories list updates to v13...

CVE-2021-44447

CVE-2021-44447 describes a use-after-free vulnerability in the JTTK library inside Siemens JT Utilities/JT Open Toolkit (JT Utilities pre-13.0.3.0 and JTTK pre-11.0.3.0) triggered while parsing specially crafted JT files, with potential code execution in the current process. Affected versions: JT...

CVE-2021-44450

Summary: CVE-2021-44450 affects Siemens JT Utilities and JTTK. The JTTK library in affected products is vulnerable to an out-of-bounds read past the end of an allocated buffer when parsing JT files, enabling leakage of information in the current process context. Affected versions are JT Utilities...

CVE-2021-44433

CVE-2021-44433 relates to a use-after-free in the JTTK library used by Siemens JT Utilities and JT Open Toolkit (JT Utilities: < v13.1.1.0; JTTK:

CVE-2021-44439

CVE-2021-44439 affects Siemens JT Utilities (all versions < 13.1.1.0) and JT Open Toolkit/JTTK (all versions

CVE-2021-44441

CVE-2021-44441 describes an out-of-bounds write in the JTTK library when parsing specially crafted JT files, allowing code execution in the current process. Affected products: JT Utilities (< 13.1.1.0) and JTTK (

CVE-2021-44438

The CVE-2021-44438 entry concerns Siemens JT Utilities and JT Open Toolkit (JTTK). Affected products include JT Utilities (all versions before v13.1.1.0) and JTTK (all versions before v11.1.1.0). The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing spec...

CVE-2021-44446

CVE-2021-44446 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The JTTK library in affected products permits an out-of-bounds write past the end of an allocated structure while parsing specially crafted JT files, which could allow code execution in the current process. Affected versions:...

CVE-2021-44448

CVE-2021-44448 affects Siemens JT Open Toolkit (JTTK) and JT Utilities. A vulnerability in the JTTK library allows an out-of-bounds read past the end of an allocated buffer while parsing JT files, enabling potential information leakage from the current process. Affected products: JT Utilities (al...

CVE-2021-44431

Summary: CVE-2021-44431 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The issue is an out-of-bounds read past the end of an allocated buffer when parsing specially crafted JT files, enabling potential information leakage in the current process. Affected products: JT Utilities (all vers...

CVE-2021-44430

CVE-2021-44430 affects Siemens JT Utilities and JT Open Toolkit (JTTK): an out-of-bounds write past the end of an allocated structure while parsing specially crafted JT files, enabling potential code execution in the current process. Affected versions are JT Utilities prior to 13.1.1.0 and JTTK p...

CVE-2021-44434

Summary of CVE-2021-44434 (Siemens JT Utilities / JTTK): Affected products are JT Utilities (all versions before 13.1.1.0) and JTTK (before 11.1.1.0). The vulnerability is an out-of-bounds write while parsing specially crafted JT files, which could allow code execution in the current process cont...

CVE-2021-44435

The CVE-2021-44435 family affects Siemens JT Utilities (< v13.1.1.0) and JT Open Toolkit/JTTK (

CVE-2021-44442

Siemens JT Utilities and JT Open Toolkit (JTTK) are affected by CVE-2021-44442: an out-of-bounds write past a fixed-length heap-based buffer while parsing specially crafted JT files, potentially allowing code execution in the process context. Affected versions: JT Utilities < 13.1.1.0 and JTTK

CVE-2021-44443

Summary: CVE-2021-44443 affects Siemens JT Utilities and JT Open Toolkit (JTTK). The JTTK library can trigger an out-of-bounds write past the end of an allocated structure while parsing specially crafted JT files, which could allow code execution in the current process. Affected versions: JT Util...