CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2021-40166
High (7.8) in autodesk. EPSS 1.0% chance of exploitation in the next 30 days.
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
Severity
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-416
- Published
- Modified
- Record from
- the NVD, synced
Affected
- autodesk:autocad
- autodesk:autocad_advance_steel
- autodesk:autocad_architecture
- autodesk:autocad_civil_3d
- autodesk:autocad_electrical
- autodesk:autocad_lt
- autodesk:autocad_map_3d
- autodesk:autocad_mechanical
- autodesk:autocad_mep
- autodesk:autocad_plant_3d
- autodesk:design_review
- autodesk:dwg_trueview
- autodesk:fusion
- autodesk:infrastructure_parts_editor
- autodesk:infraworks
- autodesk:inventor
- autodesk:navisworks
- autodesk:revit
- autodesk:storm_and_sanitary_analysis