Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2021-40155

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

  • Published: Sep 15, 2021
  • Updated: Apr 14, 2023
  • CVE: CVE-2021-40155
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
autodesk / navisworks 2020 2020.x
autodesk / navisworks 2021 2021.x
autodesk / navisworks 2022 2022.x
autodesk / navisworks 2019 2019.x