Description
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains a use after free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-14900)
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Siemens | JT Utilities | All versions < V13.1.1.0 |
| Siemens | JTTK | All versions < V11.1.1.0 |
References
Timeline
- Published
- Dec 14, 2021
- Last modified
- Jun 17, 2026
- NVD status
- Modified