CVE-2021-27045 — Out-of-bounds Read in Navisworks

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 38.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Autodesk Navisworks
Timeline
PublishedSep 15
Latest updateMay 24

Description

A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

▶NVDautodesk/navisworks4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-8f7q-x4r8-9427: A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF fi↗2022-05-24
▶
CVEList
CVE-2021-27045: A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF fi↗2021-09-15
▶
CVE-2021-27045 — Out-of-bounds Read in Navisworks | cvebase