VULNERABILITY INTELLIGENCE
CVE-2021-40159
CVSS score7.8 HIGH
EPSS probability2.30%
CISA KEVNot currently listed
Published2022-01-25
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.
Weakness classification
- nvd@nist.gov: CWE-200
Primary references
- psirt@autodesk.com — Vendor Advisory
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- psirt@autodesk.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry