NetSight
IP …
high7.8

CVE-2021-40166

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them.

Impact

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

Affected products

VendorProductAffected versions
AutodeskAutocad
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Advance Steel
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Architecture
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Civil 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Electrical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Lt
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2020 before 2020.3.2
from 2021 before 2021.1.2
from 2021 before 2021.2.2
from 2022 before 2022.1.2
AutodeskAutocad Map 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mep
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskDesign Review
Version 2018
AutodeskDwg Trueview
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.1

Weakness classification

CWE-416

References