VULNERABILITY INTELLIGENCE

CVE-2021-40156

CVSS score7.8 HIGH
EPSS probability0.99%
CISA KEVNot currently listed
Published2021-09-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references