Out of Bounds Read Vulnerability in JT2Go and Teamcenter Visualization by Siemens

CVE-2022-41281

Summary

An out of bounds read vulnerability exists in the CGM_NIST_Loader.dll of the JT2Go and Teamcenter Visualization products. This issue affects multiple versions of the software and allows an attacker to exploit the vulnerability by crafting a malicious CGM file. When the vulnerable software attempts to parse this file, it may lead to read access violations, allowing the attacker to execute arbitrary code within the context of the affected application. It is crucial for users to update their software to the latest versions to mitigate potential security risks.

References