CVE-2021-27045

HIGH

Autodesk Navisworks 2019-2022 - Out-of-bounds Read via PDF File Parsing

Title source: llm

Description

A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0008

Scores

CVSS v3 7.8

EPSS 0.0093

EPSS Percentile 56.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-125

Status published

Products (4)

autodesk/navisworks 2019

autodesk/navisworks 2020

autodesk/navisworks 2021

autodesk/navisworks 2022

Published Sep 15, 2021

Tracked Since Feb 18, 2026