Skip to content
OpenAdvisories
Unscored CVE-2021-40165 EUVD-2021-27350GHSA-953g-4f76-943p

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer …

Published Oct 7, 2022 · Updated Aug 4, 2024 · Assigned by autodesk

Description

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3 2022, 2021, 2020, 2019 —

References