CVE-2021-27035

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGH
EPSS
0.3%
top 49.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Autodesk Design Review
Timeline
PublishedJul 9
Latest updateMay 24

Description

A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA or DWF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5autodesk_design_review2018, 2017, 2013, 2012, 2011
▶NVDautodesk/design_review5 versions+4

Patches

Patch: www.autodesk.com ↗Patch: www.autodesk.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rcj2-394g-3r7f: A maliciously crafted TIFF, PDF, PICT or DWF files in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated boundaries when par↗2022-05-24
▶
CVEList
CVE-2021-27035: A maliciously crafted TIFF, TIF, PICT, TGA, or DWF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be forced to read beyond allocated↗2021-07-09
▶
CVE-2021-27035 (HIGH CVSS 7.8) | A maliciously crafted TIFF | cvebase.io