CVEvulnerability

CVE-2021-27037

7.8 HIGH Published 2021-07-09 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2021-07-09
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-416

Description

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.

Affected configurations

• autodesk design review 2011 • autodesk design review 2012 • autodesk design review 2013 • autodesk design review 2017 • autodesk design review 2018

Weakness · CWE (1)

CWE-416 Use After Free weakness

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 Vendor Advisory
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004 Vendor Advisory

CVE-2021-27037

Description

Affected configurations

Related

Weakness · CWE (1)

References