CVE-2022-29030: Siemens JT2GO

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visualization V14.0 (All versions < V14.0.0.1). The Mono_Loader.dll library is vulnerable to integer overflow condition while parsing specially crafted TG4 files. An attacker could leverage this vulnerability to crash the application causing denial of service condition.

Affected products

• Siemens JT2GO: before 13.3.0.3 (fixed in 13.3.0.3)
• Siemens Teamcenter Visualization: from 13.3, before 13.3.0.3 (fixed in 13.3.0.3); from 14.0, before 14.0.0.1 (fixed in 14.0.0.1)

Published 2022-05-20. Last modified 2026-06-17.