CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2021-40162
High (7.8) in autodesk. EPSS 1.0% chance of exploitation in the next 30 days.
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- autodesk:autocad
- autodesk:autocad_advance_steel
- autodesk:autocad_architecture
- autodesk:autocad_civil_3d
- autodesk:autocad_electrical
- autodesk:autocad_lt
- autodesk:autocad_map_3d
- autodesk:autocad_mechanical
- autodesk:autocad_mep
- autodesk:autocad_plant_3d
- autodesk:design_review
- autodesk:dwg_trueview
- autodesk:fusion
- autodesk:infrastructure_parts_editor
- autodesk:infraworks
- autodesk:inventor
- autodesk:navisworks
- autodesk:revit
- autodesk:storm_and_sanitary_analysis