Vulnerability Database

317,182

Total vulnerabilities in the database

CVE-2021-40156

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

  • Published: Sep 15, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-40156
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
autodesk / navisworks 2020 2020.x
autodesk / navisworks 2021 2021.x
autodesk / navisworks 2022 2022.x
autodesk / navisworks 2019 2019.x