CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
autodeskCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
autodeskadvance_steel
2022 ≤
𝑥
< 2022.1.2
autodeskautocad
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_architecture
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_electrical
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_lt
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_map_3d
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_mechanical
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_mep
2022 ≤
𝑥
< 2022.1.2
autodeskautocad_plant_3d
2022 ≤
𝑥
< 2022.1.2
autodeskcivil_3d
2022 ≤
𝑥
< 2022.1.2
autodeskinventor
2022 ≤
𝑥
< 2022.2
𝑥
= Vulnerable software versions
References