Description
A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14995)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT Utilities | All versions < V13.1.1.0 | — |
| Siemens | JTTK | All versions < V11.1.1.0 | — |
Advisories 2
- ICSA-21-350-17 Siemens JT Utilities and JT Open Toolkit CISA ICS & IT advisories · May 6, 2025
- SSA-802578 SSA-802578: Multiple File Parsing Vulnerabilities in JTTK before V11.1.1.0 and JT Utilities before V13.1.1.0 Siemens ProductCERT · Dec 14, 2021