CVE-2023-38683

HighCVSS 7.8

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

A vulnerability has been identified in JT2Go and Teamcenter Visualization applications, affecting versions prior to V14.2.0.5 for JT2Go and V13.2.0.14, V14.1.0.10, and V14.2.0.5 for Teamcenter Visualization. The issue involves an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file.

Risk Assessment

An attacker could exploit this vulnerability to execute code in the context of the current process, posing a significant security risk to the system.

Recommendation

It is recommended to update to the latest versions of the software to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5)

CVE-2023-38682High
A vulnerability has been identified in JT2Go and Teamcenter Visualization applications that may read data out of bounds while parsing specially crafted TIFF files. This could allow an attacker to execute code in the context of the current process.

Original NVD description (English source)

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V14.1 (All versions < V14.1.0.10), Teamcenter Visualization V14.2 (All versions < V14.2.0.5). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted TIFF file. This could allow an attacker to execute code in the context of the current process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS