CVE-2021-27037

CWE-416 — Use After Free3 documents3 sources
Severity
7.8HIGH
EPSS
0.5%
top 34.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Autodesk Design Review
Timeline
PublishedJul 9
Latest updateMay 24

Description

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5autodesk_design_review2018, 2017, 2013, 2012, 2011
▶NVDautodesk/design_review5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-74m7-q3cj-pv7p: A maliciously crafted PNG, PDF or DWF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been fre↗2022-05-24
▶
CVEList
CVE-2021-27037: A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has al↗2021-07-09
▶
CVE-2021-27037 (HIGH CVSS 7.8) | A maliciously crafted PNG | cvebase.io