Use after free in Siemens JT Open
Priority LOW 37CWE-416Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-416 and the CVSS impact.
Summary
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a use-after-free vulnerability that could be triggered while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-15057, ZDI-CAN-19081)
Why it matters now
EPSS 0.01615 76th percentileScored 2026-11-07
Fix Fixed JT Open (Siemens): V11.1.1.0JT Utilities (Siemens): V13.1.1.0+1 more product
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Siemens | JT Open | before V11.1.1.0 | V11.1.1.0 | Patch available | CNA |
| Siemens | JT Utilities | before V13.1.1.0 | V13.1.1.0 | Patch available | CNA |
| Siemens | Solid Edge | before V2023 | V2023 | Patch available | CNA |
- JT Open VendorSiemens Affected before V11.1.1.0 Fixed in V11.1.1.0 Patch available CNA
- JT Utilities VendorSiemens Affected before V13.1.1.0 Fixed in V13.1.1.0 Patch available CNA
- Solid Edge VendorSiemens Affected before V2023 Fixed in V2023 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:* | before 11.1.1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:* | before 13.1.1.0 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* | before 13.2.0.5 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* | before se2023 | Vulnerable | Siemens |
| cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* | before 13.2.0.5 | Vulnerable | Siemens |
- cpe:2.3:a:siemens:jt_open_toolkit:*:*:*:*:*:*:*:* Versions before 11.1.1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:jt_utilities:*:*:*:*:*:*:*:* Versions before 13.1.1.0 Vulnerable ·Siemens
- cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:* Versions before 13.2.0.5 Vulnerable ·Siemens
- cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:* Versions before se2023 Vulnerable ·Siemens
- cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:* Versions before 13.2.0.5 Vulnerable ·Siemens
Remediation
- Fix · CNA JT Open (Siemens) Fixed in V11.1.1.0
- Fix · CNA JT Utilities (Siemens) Fixed in V13.1.1.0
- Fix · CNA Solid Edge (Siemens) Fixed in V2023
Timeline
- 2026-10-02 Threatist record created from CVE-2021-44014
- 2026-10-03 Alias added: GHSA-g5m4-xwjw-xgc2
References
More Siemens Jt2go vulnerabilities
- TI-2020-16414 NULL pointer dereference in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16413 Type confusion in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16410 Heap-based buffer overflow in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16408 Heap-based buffer overflow in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16419 Out-of-bounds read in Siemens JT2Go CVSS 3.1HIGH 8.8
- TI-2020-16418 Out-of-bounds write in Siemens JT2Go CVSS 3.1HIGH 8.8
Sources
- CVE-2021-44014 · CVE Program
- CVE-2021-44014 · NVD
- FIRST EPSS
- GHSA-g5m4-xwjw-xgc2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences