CVE-2021-27036

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A maliciously crafted PCX, PICT, RCL, TIF, BMP, PSD or TIFF file can be used to write beyond the allocated buffer while parsing PCX, PDF, PICT, RCL, BMP, PSD or TIFF files. This vulnerability can be exploited to execute arbitrary code

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	Autodesk Design Review	2018, 2017, 2013, 2012, 2011

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004Patch, Vendor Advisory
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004Patch, Vendor Advisory

Timeline

Published: Jul 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-270377.8A maliciously crafted PNG, PDF or DWF file in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can be used to attempt to free an object t CVE-2021-270387.8A Type Confusion vulnerability in Autodesk Design Review 2018, 2017, 2013, 2012, 2011 can occur when processing a maliciously crafted PDF fi CVE-2021-270397.8A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for b CVE-2021-270403.3A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploi CVE-2021-270417.8A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited CVE-2021-270427.8A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because th CVE-2021-270437.8An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpect CVE-2021-270447.8A Out-Of-Bounds Read/Write Vulnerability in Autodesk FBX Review version 1.4.0 may lead to remote code execution through maliciously crafted CVE-2021-270457.8A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing CVE-2021-270467.8A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously CVE-2021-270477.8HEVC Video Extensions Remote Code Execution Vulnerability CVE-2021-270487.8HEVC Video Extensions Remote Code Execution Vulnerability