CVE-2021-34332CWE-835

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2)

published July 13, 2021

CVSS
—
EPSS
1%
Percentile
65.7
In the wild
Unconfirmed
What it is

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in an infinite loop condition that leads to denial of service condition. An attacker could leverage this vulnerability to consume excessive resources. (CNVD-C-2021-79300)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01112 · 65.7th percentile
Weakness
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')
Published
2021-07-13T11:03Z
EPSS history
Timeline
  • 13 JUL 11:03Z
    A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2)
    cvelistv5