What is the severity of CVE-2021-34333?

The severity of CVE-2021-34333 is medium with a severity value of 5.5.

Which software versions are affected by CVE-2021-34333?

CVE-2021-34333 affects JT2Go versions up to exclusive 13.2 and Teamcenter Visualization versions up to exclusive 13.2.

What is the vulnerability in JT2Go and Teamcenter Visualization?

The vulnerability in JT2Go and Teamcenter Visualization is due to the lack of proper validation of user-supplied data when parsing BMP files in the BMP_Loader.dll library.

What could happen if a malformed input file is processed?

If a malformed input file is processed, it could result in a double free of an allocated memory, leading to a potential security compromise.

Where can I find more information about CVE-2021-34333?

You can find more information about CVE-2021-34333 in the Siemens ProductCERT security advisory at the following link: [Siemens ProductCERT Security Advisory](https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf)

Vulnerability/
CVE-2021-34333

medium

5.5

CWE

415

13/7/2021

4/8/2024

CVE-2021-34333: Double Free

First published: Tue Jul 13 2021(Updated: )

A vulnerability has been identified in JT2Go (All versions < V13.2), Teamcenter Visualization (All versions < V13.2). The BMP_Loader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. A malformed input file could result in double free of an allocated buffer that leads to a crash. An attacker could leverage this vulnerability to cause denial of service condition. (CNVD-C-2021-79295)

Credit: productcert@siemens.com

Affected Software	Affected Version	How to fix
Siemens JT2Go	<13.2.0
Siemens Teamcenter Visualization	<13.2.0
Siemens JT2Go	<13.2	13.2
Siemens Teamcenter Visualization	<13.2	13.2

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

ICSA-21-194-15

Frequently Asked Questions

What is the severity of CVE-2021-34333?
The severity of CVE-2021-34333 is medium with a severity value of 5.5.
Which software versions are affected by CVE-2021-34333?
CVE-2021-34333 affects JT2Go versions up to exclusive 13.2 and Teamcenter Visualization versions up to exclusive 13.2.
What is the vulnerability in JT2Go and Teamcenter Visualization?
The vulnerability in JT2Go and Teamcenter Visualization is due to the lack of proper validation of user-supplied data when parsing BMP files in the BMP_Loader.dll library.
What could happen if a malformed input file is processed?
If a malformed input file is processed, it could result in a double free of an allocated memory, leading to a potential security compromise.
Where can I find more information about CVE-2021-34333?
You can find more information about CVE-2021-34333 in the Siemens ProductCERT security advisory at the following link: [Siemens ProductCERT Security Advisory](https://cert-portal.siemens.com/productcert/pdf/ssa-483182.pdf)

collector/nvd-index
agent/type
collector/mitre-cve
source/MITRE
agent/weakness
agent/severity
agent/references
agent/author
agent/last-modified-date
agent/tags
agent/description
agent/first-publish-date
agent/softwarecombine
agent/event
collector/ics-cert-advisory
source/ICS
agent/software-canonical-lookup
vendor/siemens
canonical/siemens jt2go
canonical/siemens teamcenter visualization

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.