Skip to content
OpenAdvisories
Unscored CVE-2021-40166 EUVD-2021-27351GHSA-mfx9-gcm4-c79c

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed …

Published Oct 7, 2022 · Updated Aug 4, 2024 · Assigned by autodesk

Description

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Revit, Inventor, Infraworks, Navisworks, Fusion, Infrastructure Parts Editors, Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3 2022, 2021, 2020, 2019 —

References