A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011 | Vendor Advisory |
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011 - Vendor Advisory |
11 Oct 2022, 17:11
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-07 18:15
Updated : 2024-11-21 06:23
NVD link : CVE-2021-40166
Mitre link : CVE-2021-40166
CVE.ORG link : CVE-2021-40166
JSON object : View
Products Affected
autodesk
- infraworks
- design_review
- autocad_plant_3d
- revit
- autocad_civil_3d
- autocad_architecture
- storm_and_sanitary_analysis
- autocad_mep
- dwg_trueview
- autocad_lt
- autocad_advance_steel
- autocad_mechanical
- inventor
- autocad_map_3d
- autocad
- navisworks
- infrastructure_parts_editor
- fusion
- autocad_electrical
CWE
CWE-416
Use After Free