Skip to content
OpenAdvisories
Unscored CVE-2021-40160 EUVD-2021-27345GHSA-3xmw-g98x-jm5w

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerab…

Published Dec 23, 2021 · Updated Aug 4, 2024 · Assigned by autodesk

Description

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodes prior to 9.0.7 —

References