VULNERABILITY INTELLIGENCE
CVE-2021-27034
CVSS score7.8 HIGH
EPSS probability2.21%
CISA KEVNot currently listed
Published2021-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- psirt@autodesk.com — Vendor Advisory
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry