VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 14, 2021· Updated Jun 17, 2026

CVE-2021-44450

CVE-2021-44450

Description

A vulnerability has been identified in JT Utilities (All versions < V12.8.1.1), JTTK (All versions < V10.8.1.1). JTTK library in affected products is vulnerable to an out of bounds read past the end of an allocated buffer when parsing JT files. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-15055, ZDI-CAN-14915, ZDI-CAN-14865)

Affected products

4
  • Siemens Foundation/JTTKllm-fuzzy2 versions
    < V10.8.1.1+ 1 more
    • (no CPE)range: < V10.8.1.1
    • (no CPE)range: All versions < V10.8.1.1
  • Siemens Foundation/JT Utilitiesllm-fuzzy2 versions
    < V12.8.1.1+ 1 more
    • (no CPE)range: < V12.8.1.1
    • (no CPE)range: All versions < V12.8.1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.