← Back

CVE-2021-40166

nvd nist
Published: Oct 7, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

Affected (88)

Autodesk
19 products
Autocad
Autocad Advance Steel
Autocad Architecture
Autocad Civil 3d
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Design Review
Dwg Trueview
Fusion
Infrastructure Parts Editor
Infraworks
Inventor
Navisworks
Revit
Storm And Sanitary Analysis
Configuration A
88 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad
2019 ≤ version < 2019.1.4
Autocad
2020 ≤ version < 2020.1.5
Autocad
2021 ≤ version < 2021.1.2
Autocad
2022 ≤ version < 2022.1.2
Autodesk
Autocad Advance Steel
2019 ≤ version < 2019.1.4
Autocad Advance Steel
2020 ≤ version < 2020.1.5
Autocad Advance Steel
2021 ≤ version < 2021.1.2
Autocad Advance Steel
2022 ≤ version < 2022.1.2
Autodesk
Autocad Architecture
2019 ≤ version < 2019.1.4
Autocad Architecture
2020 ≤ version < 2020.1.5
Autocad Architecture
2021 ≤ version < 2021.1.2
Autocad Architecture
2022 ≤ version < 2022.1.2
Autodesk
Autocad Civil 3d
2019 ≤ version < 2019.1.4
Autocad Civil 3d
2020 ≤ version < 2020.1.5
Autocad Civil 3d
2021 ≤ version < 2021.1.2
Autocad Civil 3d
2022 ≤ version < 2022.1.2
Autodesk
Autocad Electrical
2019 ≤ version < 2019.1.4
Autocad Electrical
2020 ≤ version < 2020.1.5
Autocad Electrical
2021 ≤ version < 2021.1.2
Autocad Electrical
2022 ≤ version < 2022.1.2
Autodesk
Autocad Lt
2019 ≤ version < 2019.1.4
Autocad Lt
2020 ≤ version < 2020.1.5
Autocad Lt
2021 ≤ version < 2021.1.2
Autocad Lt
2022 ≤ version < 2022.1.2
Autocad Lt
2020 ≤ version < 2020.3.2
Autocad Lt
2021 ≤ version < 2021.2.2
Autocad Lt
2022 ≤ version < 2022.2.2
Autodesk
Autocad Map 3d
2019 ≤ version < 2019.1.4
Autocad Map 3d
2020 ≤ version < 2020.1.5
Autocad Map 3d
2021 ≤ version < 2021.1.2
Autocad Map 3d
2022 ≤ version < 2022.1.2
Autodesk
Autocad Mechanical
2019 ≤ version < 2019.1.4
Autocad Mechanical
2020 ≤ version < 2020.1.5
Autocad Mechanical
2021 ≤ version < 2021.1.2
Autocad Mechanical
2022 ≤ version < 2022.1.2
Autodesk
Autocad Mep
2019 ≤ version < 2019.1.4
Autocad Mep
2020 ≤ version < 2020.1.5
Autocad Mep
2021 ≤ version < 2021.1.2
Autocad Mep
2022 ≤ version < 2022.1.2
Autodesk
Autocad Plant 3d
2019 ≤ version < 2019.1.4
Autocad Plant 3d
2020 ≤ version < 2020.1.5
Autocad Plant 3d
2021 ≤ version < 2021.1.2
Autocad Plant 3d
2022 ≤ version < 2022.1.2
Autodesk
Design Review
Version 2018
Design Review
Version 2018 hotfix2
Design Review
Version 2018 hotfix3
Design Review
Version 2018 hotfix
Autodesk
Dwg Trueview
2019 ≤ version < 2019.1.4
Dwg Trueview
2020 ≤ version < 2020.1.5
Dwg Trueview
2021 ≤ version < 2021.1.2
Dwg Trueview
2022 ≤ version < 2022.1.1
Fusion
2.0.10356 ≤ version < 2.0.11405
Autodesk
Infrastructure Parts Editor
2019 ≤ version < 2019.2.2
Infrastructure Parts Editor
2020 ≤ version < 2020.0.2
Infrastructure Parts Editor
Version 2021
Infrastructure Parts Editor
Version 2022
Autodesk
Infraworks
2019 ≤ version < 2019.3
Infraworks
2020 ≤ version < 2020.2
Infraworks
2021 ≤ version < 2021.2
Infraworks
Version 2019.3
Infraworks
Version 2019.3 hotfix_1
Infraworks
Version 2019.3 hotfix_2
Infraworks
Version 2019.3 hotfix_3
Infraworks
Version 2020.2
Infraworks
Version 2020.2 hotfix_1
Infraworks
Version 2020.2 hotfix_2
Infraworks
Version 2021.2
Infraworks
Version 2021.2 hotfix_1
Infraworks
Version 2021.2 hotfix_2
Infraworks
Version 2022.0
Infraworks
Version 2022.0 hotfix_1
Infraworks
Version 2022.1
Autodesk
Inventor
2019 ≤ version < 2019.6
Inventor
2020 ≤ version < 2020.5
Inventor
2021 ≤ version < 2021.4
Inventor
2022 ≤ version < 2022.2
Autodesk
Navisworks
2019 ≤ version < 2019.7
Navisworks
2020 ≤ version < 2020.5
Navisworks
2021 ≤ version < 2021.4
Navisworks
2022 ≤ version < 2022.2
Autodesk
Revit
2019 ≤ version < 2019.2.4
Revit
2020 ≤ version < 2020.2.6
Revit
2021 ≤ version < 2021.1.5
Revit
Version 2022
Autodesk
Storm And Sanitary Analysis
2020 ≤ version < 2020.3.1
Storm And Sanitary Analysis
2021 ≤ version < 2021.3.1
Storm And Sanitary Analysis
Version 2019
Storm And Sanitary Analysis
Version 2022

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.