Skip to content
OpenAdvisories
Unscored CVE-2021-40156 EUVD-2021-27341GHSA-7qg6-74r3-86w6

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsin…

Published Sep 15, 2021 · Updated Aug 4, 2024 · Assigned by autodesk

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Autodesk Navisworks 2019, 2020, 2021, 2022 —

References