CVE-2021-40167

HIGH

Autodesk Design Review - Out-of-bounds Read via Crafted DWF or PCT File

Title source: llm
STIX 2.1

Description

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0773
EPSS Percentile 93.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-125
Status published
Products (1)
autodesk/design_review 2018
Published Jan 25, 2022
Tracked Since Feb 18, 2026