vulnerability
AutoDesk AutoCAD: CVE-2021-27039: Double Free, Heap Overflow, Out-of-bound Read/Write, Use-After-Free, Type Confusion, Memory Corruption
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Jan 14, 2022 | Jul 28, 2025 | Jul 28, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jan 14, 2022
Added
Jul 28, 2025
Modified
Jul 28, 2025
Description
A maliciously crafted TIFF and PCX file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.
Solution
autodesk-autocad-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.