CVE-2021-27033

HIGH

Autodesk Design Review 2011-2018 - Remote Code Execution via Double Free

Title source: llm

Description

A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process.

References (3)

Core 3

Core References

Patch patch

https://www.autodesk.com/products/autodesk-access/overview

Patch patch

https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Where-can-I-download-the-latest-update-of-AutoCAD-AutoCAD-LT-2022.html

Vendor Advisory vendor-advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Scores

CVSS v3 8.1

EPSS 0.0299

EPSS Percentile 85.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Details

CWE

CWE-415

Status published

Products (6)

Autodesk/Design Review 2018.0.0, 2017.0.0, 2013.0.0, 2012.0.0, 2011.0.0 - 2018.0.0

autodesk/design_review 2011

autodesk/design_review 2012

autodesk/design_review 2013

autodesk/design_review 2017

autodesk/design_review 2018

Published Jul 09, 2021

Tracked Since Feb 18, 2026