Description
A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D | 2022, 2021, 2020, 2019 | — |
Advisories 1
- ICSA-21-294-01 ICONICS GENESIS64 and Mitsubishi Electric MC Works64 CISA ICS & IT advisories · Oct 21, 2021