CVE-2021-40162

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 69.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
19
Autodesk AutocadAutodesk Autocad Advance SteelAutodesk Autocad Architecture+16 more
Timeline
PublishedOct 7

Description

A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages19 packages

▶NVDautodesk/revit2019 — 2019.2.4+3
▶NVDautodesk/fusion2.0.10356 — 2.0.11405
▶NVDautodesk/autocad2019 — 2019.1.4+3
▶NVDautodesk/inventor2019 — 2019.6+3
▶NVDautodesk/autocad_lt2019 — 2019.1.4+6

🔴Vulnerability Details

2
GHSA
GHSA-7479-jvwq-rgf3: A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsi↗2022-10-07
▶
CVEList
CVE-2021-40162: A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsi↗2022-10-07
▶
CVE-2021-40162 (HIGH CVSS 7.8) | A maliciously crafted TIF | cvebase.io