Unrated severityNVD Advisory· Published Nov 21, 2023· Updated Aug 4, 2024

Siemens Solid Edge, JT2Go, and Teamcenter Visualization Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2021-38405

Description

The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Affected products

Siemens Foundation/JT2Gocpe-rescue
Range: 0
Siemens Foundation/Teamcenter Visualizationcpe-rescue
Range: 12.4

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

cert-portal.siemens.com/productcert/pdf/ssa-301589.pdfmitre
www.cisa.gov/news-events/ics-advisories/icsa-22-041-07mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000