Skip to content
fr Sign in
7.8 High

CVE-2024-26275 A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254),…

Description

A vulnerability has been identified in JT2Go (All versions < V2312.0004), Parasolid V35.1 (All versions < V35.1.254), Parasolid V36.0 (All versions < V36.0.207), Parasolid V36.1 (All versions < V36.1.147), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.9), Teamcenter Visualization V2312 (All versions < V2312.0004). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.

Affected products and versions

Product Affected versions Fixed in
JT2Go 2312.0004 earliest → < 2312.0004 2312.0004
Parasolid V35.1 35.1 earliest → < 35.1.254 35.1.254
Parasolid V36.0 36.0 earliest → < 36.0.207 36.0.207
Parasolid V36.1 36.1 earliest → < 36.1.147 36.1.147
Teamcenter Visualization V14.2 14.2 earliest → < 14.2.0.12 14.2.0.12
Teamcenter Visualization V14.3 14.3 earliest → < 14.3.0.9 14.3.0.9
Teamcenter Visualization V2312 2312.0004 earliest → < 2312.0004 2312.0004
parasolid 36.1 earliest → < 36.1.147 36.1.147
parasolid 36.0 earliest → < 36.0.207 36.0.207
Show the 4 other branches
Product Affected versions Fixed in
parasolid 35.1 earliest → < 35.1.254 35.1.254
teamcenter_visualization 2312 2312 → < 2312.0004 2312.0004
teamcenter_visualization 14.3 14.3 → < 14.3.0.9 14.3.0.9
teamcenter_visualization 14.2 14.2 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of JT2Go

The 153 CVEs of JT2Go →
CVE-2024-41902 A vulnerability has been identified in JT2Go (All versions < V2406.0003) 7.8 High CVE-2023-7066 The affected applications contain an out of bounds read past the end of an allocated structure while parsing… 7.8 High CVE-2024-37997 A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK… 7.8 High CVE-2024-37996 A vulnerability has been identified in JT Open (All versions < V11.5), JT2Go (All versions < V2406.0003), PLM XML SDK… 3.3 Low
Track this CVE