← back
CVE-2021-27042

CVE-2021-27042

EPSS 1.8%
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
Affected products
n/a · Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007