CVE-2021-27034

moderate-risk

Published 2021-07-09

A heap-based buffer overflow could occur while parsing PICT, PCX, RCL or TIFF files in Autodesk Design Review 2018, 2017, 2013, 2012, 2011. This vulnerability can be exploited to execute arbitrary code.

Do I need to act?

0.67% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (5)

Design Review

Affected Vendors

Autodesk

References (18)

Vendor Advisory https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1125/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1126/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1127/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1128/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1129/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1130/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1131/

Third Party Advisory https://www.zerodayinitiative.com/advisories/ZDI-21-1132/