VYPR
High severity7.8NVD Advisory· Published Jun 25, 2021· Updated Jun 17, 2026

CVE-2021-27041

CVE-2021-27041

Description

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code

Affected products

18
  • Autodesk/DWGllm-fuzzy
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • Autodesk/Autocad2 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.3
  • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*
  • cpe:2.3:a:iconics:genesis64:*:*:*:*:*:*:*:*
    Range: <=10.97
  • cpe:2.3:a:mitsubishielectric:mc_works64:*:*:*:*:*:*:*:*
    Range: <=4.04e

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.