High severity7.8NVD Advisory· Published Jun 25, 2021· Updated Jun 17, 2026

CVE-2021-27043

Description

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application.

Affected products

Autodesk/Advance Steel
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad2 versions
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.3
Autodesk/Autocad Architecture
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Electrical
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Map 3d
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Mechanical
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Mep
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Autocad Plant 3d
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Civil 3d
cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
Range: >=2019,<2019.1.3
Autodesk/Dwg Trueview
cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*
Range: >=2022,<2022.1.1
Autodesk/DWGllm-create

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2021-27043

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions