VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 7, 2022· Updated Jun 17, 2026

CVE-2021-40166

CVE-2021-40166

Description

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

Affected products

43
  • Autodesk/Autocad3 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*range: >=2020,<2020.3.2
  • Autodesk/Autocad Advance Steel
    cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Civil 3d
    cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Design Review4 versions
    cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
  • Autodesk/Dwg Trueview
    cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Fusion
    cpe:2.3:a:autodesk:fusion:*:*:*:*:*:*:*:*
    Range: >=2.0.10356,<2.0.11405
  • Autodesk/Infrastructure Parts Editor3 versions
    cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*range: >=2019,<2019.2.2
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:2021:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infrastructure_parts_editor:2022:*:*:*:*:*:*:*
  • Autodesk/InfraWorks14 versions
    cpe:2.3:a:autodesk:infraworks:*:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:autodesk:infraworks:*:*:*:*:*:*:*:*range: >=2019,<2019.3
    • cpe:2.3:a:autodesk:infraworks:2019.3:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2019.3:hotfix_3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2020.2:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2021.2:hotfix_2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.0:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.0:hotfix_1:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:infraworks:2022.1:*:*:*:*:*:*:*
  • Autodesk/Inventor
    cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.6
  • Autodesk/Navisworks
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.7
  • Autodesk/Revit2 versions
    cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*range: >=2019,<2019.2.4
    • cpe:2.3:a:autodesk:revit:2022:*:*:*:*:*:*:*
  • Autodesk/Storm And Sanitary Analysis3 versions
    cpe:2.3:a:autodesk:storm_and_sanitary_analysis:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:*:*:*:*:*:*:*:*range: >=2020,<2020.3.1
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:2019:*:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:storm_and_sanitary_analysis:2022:*:*:*:*:*:*:*
  • Autodesk/Image Processing componentdescription
  • Autodesk/Autodesk Image Processing componentllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.