High severity7.8NVD Advisory· Published Sep 15, 2021· Updated Jun 17, 2026
CVE-2021-40155
CVE-2021-40155
Description
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
Affected products
62019, 2020, 2021, 2022+ 4 more
- (no CPE)range: 2019, 2020, 2021, 2022
- cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:navisworks:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:*
- Autodesk/Navisworksdescription
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2021-0009nvdVendor Advisory
News mentions
0No linked articles in our index yet.