Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-40156

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can b

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
autodesk

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Autodesk Navisworks

  • 2019, 2020, 2021, 2022affected

References