CVE-2021-27037

7.8 highEPSS 1.6%

High (7.8) in autodesk design review. EPSS 1.6% chance of exploitation in the next 30 days.

A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by remote malicious actors to execute arbitrary code.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2021-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

autodesk:design_review

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Check your stack JSON