CVE-2022-3160: The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker…

PriorityP337high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

0.44%

35.2th percentile

The APDFL.dll contains an out-of-bounds write past the fixed-length heap-based buffer while parsing specially crafted PDF files. This could allow an attacker to execute code in the context of the current process.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
siemens	jt2go	< 14.1.0.5	14.1.0.5
siemens	teamcenter_visualization	>= 13.3.0 < 13.3.0.8	13.3.0.8
siemens	teamcenter_visualization	>= 14.0 < 14.0.0.4	14.0.0.4
siemens	teamcenter_visualization	>= 14.1 < 14.1.0.5	14.1.0.5
siemens	teamcenter_visualization_v13.3	< 13.3.0.8	13.3.0.8
siemens	teamcenter_visualization_v14.0	< 14.0.0.4	14.0.0.4
siemens	teamcenter_visualization_v14.1	< 14.1.0.5	14.1.0.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.