Lucene search

K
cvelistAutodeskCVELIST:CVE-2021-40156
HistorySep 15, 2021 - 4:35 p.m.

CVE-2021-40156

2021-09-1516:35:44
autodesk
www.cve.org
1
autodesk navisworks
dwg file
vulnerability
arbitrary code
exploit

EPSS

0.001

Percentile

49.3%

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

CNA Affected

[
  {
    "product": "Autodesk Navisworks",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2019, 2020, 2021, 2022"
      }
    ]
  }
]

EPSS

0.001

Percentile

49.3%

Related for CVELIST:CVE-2021-40156