CVE-2021-40156

HIGH

Autodesk Navisworks 2019-2022 - Out-of-bounds Write via DWG File Parsing

Title source: llm

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009

Scores

CVSS v3 7.8

EPSS 0.0042

EPSS Percentile 62.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-787

Status published

Products (4)

autodesk/navisworks 2019

autodesk/navisworks 2020

autodesk/navisworks 2021

autodesk/navisworks 2022

Published Sep 15, 2021

Tracked Since Feb 18, 2026