VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 23, 2021· Updated Jun 17, 2026

CVE-2021-40160

CVE-2021-40160

Description

PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.

Affected products

22
  • Autodesk/Advance Steel
    cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad4 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2022,<2022.1.1
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*range: >=2022,<2022.2
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2022,<2022.1.1
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*range: >=2022,<2022.2
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Civil 3d
    cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.1
  • Autodesk/Design Review5 versions
    cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
  • Autodesk/Navisworks
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.6
  • Autodesk/Revit
    cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*
    Range: >=2020,<2020.2.5
  • PDFTron/PDFTrondescription
  • PDFTron/PDFTron SDKllm-fuzzy
    Range: <9.0.7
  • Autodesk/PDFTronllm-fuzzy
    Range: <9.0.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.