CVE-2022-41851: Siemens Jt Open Toolkit

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability has been identified in JTTK (All versions < V11.1.1.0), Simcenter Femap V2022.1 (All versions < V2022.1.3), Simcenter Femap V2022.2 (All versions < V2022.2.2). The JTTK library is vulnerable to an uninitialized pointer reference vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-16973)

Affected products

• Siemens Jt Open Toolkit: before 11.1.1.0 (fixed in 11.1.1.0)
• Siemens Simcenter Femap: from 2022.1.0, before 2022.1.3 (fixed in 2022.1.3); from 2022.2.0, before 2022.2.2 (fixed in 2022.2.2)

Published 2022-10-11. Last modified 2026-06-17.