CVE-2021-27042
Assigner: autodesk
Published: 2021-06-25T12:41:19
State: PUBLISHED
affected: product: Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D
vendor: n/a
versions: status: affected
version: 2022.1.1
descriptions: value: A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
problemTypes: descriptions: description: Memory Corruption Vulnerability 
type: text