Not rated
CVE-2021-27040 A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file
Description
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D | Versions not published |
References
- www.autodesk.com www.autodesk.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- www.zerodayinitiative.com www.zerodayinitiative.com
Timeline
- Published
- Last modified
Other CVEs of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
The 14 CVEs of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D →
CVE-2022-33881
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries
Not rated
CVE-2022-27870
A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing…
Not rated
CVE-2022-27868
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability
Not rated
CVE-2022-27869
A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries…
Not rated