CVE-2021-27040

A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code...

ICONICS GENESIS64 and Mitsubishi Electric MC Works64

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS GENESIS64, Mitsubishi Electric MC Works64 Vulnerabilities: Out-of-bounds Read, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of these vulnerabilities may...

CVE-2021-27040

CVE-2021-27040 is an out-of-bounds read in the DWG file parsing path that affects ICONICS GENESIS64 (and related components) when importing DWG data. Root cause described across sources as improper validation of user-supplied data leading to reading past allocated buffers, enabling potential arbi...