CVE-2021-40165

HIGH

7.8

Description

A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

CVE Details

CVSS v3.1 Score7.8

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published10/7/2022

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

autodesk:autocadautodesk:autocad_advance_steelautodesk:autocad_architectureautodesk:autocad_civil_3dautodesk:autocad_electricalautodesk:autocad_ltautodesk:autocad_map_3dautodesk:autocad_mechanicalautodesk:autocad_mepautodesk:autocad_plant_3dautodesk:design_reviewautodesk:dwg_trueviewautodesk:fusionautodesk:infrastructure_parts_editorautodesk:infraworksautodesk:inventorautodesk:navisworksautodesk:revitautodesk:storm_and_sanitary_analysis

Weaknesses (CWE)

CWE-787

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011(psirt@autodesk.com)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.