CVE-2021-27045

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A maliciously crafted PDF file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the PDF file. This vulnerability can be exploited to execute arbitrary code.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Sep 15, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-270467.8A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciouslyCVE-2021-270477.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-270487.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-270497.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-270507.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-270517.8HEVC Video Extensions Remote Code Execution VulnerabilityCVE-2021-270525.3Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2021-270537.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-270547.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2021-270557.0Microsoft Visio Security Feature Bypass VulnerabilityCVE-2021-270567.8Microsoft PowerPoint Remote Code Execution VulnerabilityCVE-2021-270577.8Microsoft Office Remote Code Execution Vulnerability
CVE-2021-27045: High severity, CVSS 7.8 | Vulnix