CVE-2021-44444: siemens jt_open_toolkit Out-of-bounds Read

Vulnerability summary

CVE-2021-44444 is a medium (CVSS 4.3) Out-of-bounds Read vulnerability in siemens jt_open_toolkit. EPSS estimates a 1.14% chance of exploitation in the next 30 days, higher than 65.9% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 14-12-2021
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing specially crafted JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15052)

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.