CVE-2021-27042

Summary

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

Affected Software

VendorProductVersion RangeStatus
n/aAutodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D2022.1.1affected

Weaknesses

  • Memory Corruption Vulnerability

ADP Enrichment

CVE Program Container

Additional References

References