vulnerability
AutoDesk AutoCAD: CVE-2021-27037: Double Free, Heap Overflow, Out-of-bound Read/Write, Use-After-Free, Type Confusion, Memory Corruption
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Jan 14, 2022 | Jul 28, 2025 | Jul 28, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jan 14, 2022
Added
Jul 28, 2025
Modified
Jul 28, 2025
Description
A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011can be used to attempt to free an object that has already been freed while parsing them. This vulnerability can be exploited by remote malicious actors to execute arbitrary code.
Solution
autodesk-autocad-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.