Out of Bounds Read in JT Open and JT Utilities by Siemens

CVE-2023-30796

What is CVE-2023-30796?

A security vulnerability has been detected in JT Open and JT Utilities, where an out of bounds read can occur when parsing specially crafted JT files. This flaw affects all versions of JT Open prior to V11.4 and JT Utilities prior to V13.4. Attackers could exploit this vulnerability to read data beyond allocated buffers, potentially executing arbitrary code within the current process context. Users of these applications should take immediate precautions to mitigate associated risks.

References