VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 9, 2021· Updated Jun 17, 2026

CVE-2021-27037

CVE-2021-27037

Description

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.

Affected products

9
  • Autodesk/Design Review8 versions
    cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
    • (no CPE)
  • Autodesk/Design Reviewdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.