CVE-2021-27043

CWE-787 — Out-of-bounds WriteCWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
7.8HIGH
EPSS
0.2%
top 55.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
11
Autodesk Advance SteelAutodesk AutocadAutodesk Autocad Architecture+8 more
Timeline
PublishedJun 25
Latest updateMay 24

Description

An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages11 packages

▶NVDautodesk/autocad2019 — 2019.1.3+3
▶NVDautodesk/civil_3d2019 — 2019.1.3+3
▶NVDautodesk/autocad_lt2019 — 2019.1.3+3
▶NVDautodesk/autocad_mep2019 — 2019.1.3+3
▶NVDautodesk/dwg_trueview2022 — 2022.1.1

🔴Vulnerability Details

2
GHSA
GHSA-vwxh-hr5c-v523: An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths↗2022-05-24
▶
CVEList
CVE-2021-27043: An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths↗2021-06-25
▶
CVE-2021-27043 (HIGH CVSS 7.8) | An Arbitrary Address Write issue in | cvebase.io