Skip to content
OpenAdvisories
High · 7.8 CVE-2022-3160 EUVD-2022-42584GHSA-7pcg-jp63-83f5

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could…

Published Jan 13, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Vendor: Siemens Product: JT2Go Product: Teamcenter Visualization V13.3 Product: Teamcenter Visualization V14.0 Product: Teamcenter Visualization V14.1 Category: ICS / OT

Description

The APDFL.dll contains an out-of-bounds write past the fixed-length
heap-based buffer while parsing specially crafted PDF files. This could
allow an attacker to execute code in the context of the current process.

Affected products

VendorProductAffectedFixed
Siemens  JT2Go < 14.1.0.5 14.1.0.5
Siemens  Teamcenter Visualization V13.3 < 13.3.0.8 13.3.0.8
Siemens  Teamcenter Visualization V14.0 < 14.0.0.4 14.0.0.4
Siemens  Teamcenter Visualization V14.1 < 14.1.0.5 14.1.0.5

Advisories 3

References