CVE-2021-33738

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in JT2Go (All versions < V13.2.0.2), Teamcenter Visualization (All versions < V13.2.0.2). The plmxmlAdapterSE70.dll library in affected applications lacks proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated buffer. An attacker could leverage this vulnerability to leak information in the context of the current process. (ZDI-CAN-13405)

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Aug 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-337398.4Microsoft DWM Core Library Elevation of Privilege VulnerabilityCVE-2021-33745.3Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash.CVE-2021-337407.8Windows Media Remote Code Execution VulnerabilityCVE-2021-337418.2Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2021-337427.5Windows MSHTML Platform Remote Code Execution VulnerabilityCVE-2021-337437.8Windows Projected File System Elevation of Privilege VulnerabilityCVE-2021-337445.3Windows Secure Kernel Mode Security Feature Bypass VulnerabilityCVE-2021-337456.5Windows DNS Server Denial of Service VulnerabilityCVE-2021-337468.0Windows DNS Server Remote Code Execution VulnerabilityCVE-2021-337498.8Windows DNS Snap-in Remote Code Execution VulnerabilityCVE-2021-33759.8ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code executCVE-2021-337508.8Windows DNS Snap-in Remote Code Execution Vulnerability
CVE-2021-33738: Low severity, CVSS 3.3 | Vulnix