Skip to content
OpenAdvisories
Unscored CVE-2021-40155 EUVD-2021-27340GHSA-xqxh-7x7w-p8r9

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing…

Published Sep 15, 2021 · Updated Aug 4, 2024 · Assigned by autodesk

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Autodesk Navisworks 2019, 2020, 2021, 2022 —

References