High severity7.8NVD Advisory· Published Jun 25, 2021· Updated Jun 17, 2026

CVE-2021-27042

Description

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

Affected products

Autodesk/Advance Steel
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad2 versions
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
Autodesk/Autocad Architecture
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Electrical
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Map 3d
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Mechanical
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Mep
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Plant 3d
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Civil 3d
cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/DWGllm-create

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-27042

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions