Description
Datalogics Library APDFLThe v18.0.4PlusP1e and prior contains a stack-based buffer overflow due to documents containing corrupted fonts, which could allow an attack that causes an unhandled crash during the rendering process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | JT2Go | < 14.2.0.2 | 14.2.0.2 |
| Siemens | Teamcenter Visualization | 13.2 – < 13.2.0.13, 13.3 – < 13.3.0.9, 14.0 – < 14.0.0.5, 14.1 – < 14.1.0.7, 14.2 – < 14.2.0.2 | 13.2.0.13 |
| Datalogics | Library APDFL | ≤ v18.0.4PlusP1e | — |
Advisories 4
- ICSA-23-103-11 Siemens Teamcenter Visualization and JT2Go CISA ICS & IT advisories · May 6, 2025
- ICSA-23-164-01 Datalogics Library Third-Party CISA ICS & IT advisories · Jun 13, 2023
- SSA-629917 SSA-629917: Datalogics File Parsing Vulnerability in Teamcenter Visualization and JT2Go Siemens ProductCERT · Apr 11, 2023
- WID-SEC-2023-0899 Siemens JT2Go: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Apr 10, 2023