CVE-2022-2069CWE-122

Datalogics APDFL library Heap-based Buffer Overflow

High · published October 20, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

The APDFL.dll in Siemens JT2Go prior to V13.3.0.5 and Siemens Teamcenter Visualization prior to V14.0.0.2 contains an out of bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00465 · 39.3th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2022-10-20T00:00Z
EPSS history
Timeline
  • 20 OCT 00:00Z
    Datalogics APDFL library Heap-based Buffer Overflow
    cvelistv5