CVEvulnerability
CVE-2021-27036
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-07-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while parsing PCX, PDF, PICT, RCL, BMP, PSD or TIFF files. This vulnerability can be exploited to execute arbitrary code
Affected configurations
• autodesk design review 2011
• autodesk design review 2012
• autodesk design review 2013
• autodesk design review 2017
• autodesk design review 2018
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 Patch, Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 Patch, Vendor Advisory