NetSight
IP …
low3.3

CVE-2021-27040

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file.

Impact

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Architecture
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 through 2022.0.1
AutodeskAutocad Electrical
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Lt
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Map 3d
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Mechanical
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Mep
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskAutocad Plant 3d
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskCivil 3d
from 2019 before 2019.1.3
from 2020 before 2020.1.4
from 2021 before 2021.1.1
from 2022 before 2022.0.1
AutodeskDwg Trueview
from 2022 before 2022.1.1
IconicsGenesis64
through 10.97

Weakness classification

CWE-125

References