Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-38405

The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Published

2023-11-21T19:15:07.647

Last Modified

2024-11-21T06:17:01.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-119
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	siemens	jt2go	< 13.2.0.7	Yes
Application	siemens	teamcenter_visualization	< 13.1.0.8	Yes
Application	siemens	teamcenter_visualization	< 13.2.0.7	Yes
Application	siemens	teamcenter_visualization	13.3.0	Yes

References

https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf Vendor Advisory ([email protected])
https://www.cisa.gov/news-events/ics-advisories/icsa-22-041-07 Third Party Advisory, US Government Resource ([email protected])
https://cert-portal.siemens.com/productcert/pdf/ssa-301589.pdf Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/news-events/ics-advisories/icsa-22-041-07 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)