CVE-2021-27040

2021-06-2512:41:07

autodesk

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.6%

JSON

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.

CNA Affected

[
  {
    "product": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2022, 2021, 2020, 2019"
      }
    ]
  }
]