CVE-2022-29033

7.8 highEPSS 0.8%

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The CGM_NIST_Loader.dll library is vulnerable to uninitialized pointer free while parsing specially crafted CGM files. An attacker could leverage this vulnerability to execute code in the context of the current process.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-824
Published: 2022-05-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:jt2go
siemens:teamcenter_visualization

References

https://cert-portal.siemens.com/productcert/pdf/ssa-553086.pdf
https://cert-portal.siemens.com/productcert/pdf/ssa-553086.pdf

Check your stack JSON