{"id":"CVE-2021-40156","state":"PUBLISHED","title":"A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can b","description":"A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.","publishedAt":"2021-09-15T16:35:44.000Z","updatedAt":"2024-08-04T02:27:31.827Z","severity":null,"assigner":"autodesk","products":["n/a Autodesk Navisworks"],"affected":[{"vendor":"n/a","product":"Autodesk Navisworks","versions":[{"version":"2019, 2020, 2021, 2022","status":"affected"}]}],"references":["https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009"],"weaknesses":[],"ingestedAt":"2026-10-29T19:48:58.929Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/40xxx/CVE-2021-40156.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-40156","state":"PUBLISHED","datePublished":"2021-09-15T16:35:44.000Z","dateUpdated":"2024-08-04T02:27:31.827Z","assignerShortName":"autodesk","assignerOrgId":"7e40ea87-bc65-4944-9723-dd79dd760601","dateReserved":"2021-08-27T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code."}],"affected":[{"vendor":"n/a","product":"Autodesk Navisworks","versions":[{"version":"2019, 2020, 2021, 2022","status":"affected"}]}],"references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Out-of-bound Write","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"autodesk","dateUpdated":"2021-09-15T16:35:44.000Z","orgId":"7e40ea87-bc65-4944-9723-dd79dd760601"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@autodesk.com","ID":"CVE-2021-40156","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Autodesk Navisworks","version":{"version_data":[{"version_value":"2019, 2020, 2021, 2022"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Out-of-bound Write"}]}]},"references":{"reference_data":[{"name":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009","refsource":"MISC","url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T02:27:31.827Z"}}]}}}