CVE-2021-40161

HIGH

Autodesk Revit < 2020.2.5 - Memory Corruption via Malicious DLL Files

Title source: llm

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 19.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

CWE-787

Status published

Products (20)

autodesk/advance_steel < 2019.1.4

autodesk/autocad 2020

autodesk/autocad 2021

autodesk/autocad 2022

autodesk/autocad < 2019.1.4

autodesk/autocad 2022 - 2022.2

autodesk/autocad_architecture < 2019.1.4

autodesk/autocad_electrical < 2019.1.4

autodesk/autocad_lt 2020

autodesk/autocad_lt 2021

... and 10 more

Published Dec 23, 2021

Tracked Since Feb 18, 2026