CVE-2021-27042

Published: Jun 25, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

Affected (40)

Products: Autodesk: Advance Steel, Autocad, Autocad Architecture, Autocad Electrical, Autocad Lt, Autocad Map 3d, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Civil 3d

10 products

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Autodesk Advance Steel	2019 ≤ version < 2019.1.3
Autodesk Advance Steel	2020 ≤ version < 2020.1.4
Autodesk Advance Steel	2021 ≤ version < 2021.1.1
Autodesk Advance Steel	2022 ≤ version < 2022.0.1
Autodesk Autocad	2019 ≤ version < 2019.1.3
Autodesk Autocad	2020 ≤ version < 2020.1.4
Autodesk Autocad	2021 ≤ version < 2021.1.1
Autodesk Autocad	2022 ≤ version < 2022.0.1
Autodesk Autocad Architecture	2019 ≤ version < 2019.1.3
Autodesk Autocad Architecture	2020 ≤ version < 2020.1.4
Autodesk Autocad Architecture	2021 ≤ version < 2021.1.1
Autodesk Autocad Architecture	2022 ≤ version ≤ 2022.0.1
Autodesk Autocad Electrical	2019 ≤ version < 2019.1.3
Autodesk Autocad Electrical	2020 ≤ version < 2020.1.4
Autodesk Autocad Electrical	2021 ≤ version < 2021.1.1
Autodesk Autocad Electrical	2022 ≤ version < 2022.0.1
Autodesk Autocad Lt	2019 ≤ version < 2019.1.3
Autodesk Autocad Lt	2020 ≤ version < 2020.1.4
Autodesk Autocad Lt	2021 ≤ version < 2021.1.1
Autodesk Autocad Lt	2022 ≤ version < 2022.0.1
Autodesk Autocad Map 3d	2019 ≤ version < 2019.1.3
Autodesk Autocad Map 3d	2020 ≤ version < 2020.1.4
Autodesk Autocad Map 3d	2021 ≤ version < 2021.1.1
Autodesk Autocad Map 3d	2022 ≤ version < 2022.0.1
Autodesk Autocad Mechanical	2019 ≤ version < 2019.1.3
Autodesk Autocad Mechanical	2020 ≤ version < 2020.1.4
Autodesk Autocad Mechanical	2021 ≤ version < 2021.1.1
Autodesk Autocad Mechanical	2022 ≤ version < 2022.0.1
Autodesk Autocad Mep	2019 ≤ version < 2019.1.3
Autodesk Autocad Mep	2020 ≤ version < 2020.1.4
Autodesk Autocad Mep	2021 ≤ version < 2021.1.1
Autodesk Autocad Mep	2022 ≤ version < 2022.0.1
Autodesk Autocad Plant 3d	2019 ≤ version < 2019.1.3
Autodesk Autocad Plant 3d	2020 ≤ version < 2020.1.4
Autodesk Autocad Plant 3d	2021 ≤ version < 2021.1.1
Autodesk Autocad Plant 3d	2022 ≤ version < 2022.0.1
Autodesk Civil 3d	2019 ≤ version < 2019.1.3
Autodesk Civil 3d	2020 ≤ version < 2020.1.4
Autodesk Civil 3d	2021 ≤ version < 2021.1.1
Autodesk Civil 3d	2022 ≤ version < 2022.0.1

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (2)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007

Source: psirt@autodesk.com

Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.