CVE-2021-44446CWE-787

A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0)

published December 14, 2021

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0). JTTK library in affected products contains an out of bounds write past the end of an allocated structure while parsing specially crafted JT files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-14828, ZDI-CAN-14898)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00840 · 57.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2021-12-14T12:07Z
EPSS history
Timeline
  • 14 DEC 12:07Z
    A vulnerability has been identified in JT Utilities (All versions < V13.0.3.0), JTTK (All versions < V11.0.3.0)
    cvelistv5