CVE-2023-38682

HighCVSS 7.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that may read data out of bounds while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

Risk Assessment

This vulnerability poses a risk of malicious code execution, potentially leading to system compromise and data loss. Organizations should be aware of the potential threats associated with using these software versions.

Recommendation

It is recommended to update JT2Go and Teamcenter Visualization to the latest versions that address this vulnerability. Regular monitoring and software updates should be part of the security strategy.

Other vulnerabilities in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5)

CVE-2023-38683High
A vulnerability has been identified in JT2Go and Teamcenter Visualization applications, affecting versions prior to V14.2.0.5 for JT2Go and V13.2.0.14, V14.1.0.10, and V14.2.0.5 for Teamcenter Visualization. The issue involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file.

Original NVD description (English source)

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS