CVE-2021-40158

HighCVSS 7.8/10Last modified Oct 8, 2026

Description

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
n/aInventor2022, 2021, 2020, 2019

References

Timeline

Published
Jan 25, 2022
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-401597.8An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities mCVE-2021-40163.3Rapid7 Insight Agent, versions prior to 3.1.3, suffer from an improper access control vulnerability whereby, the user has access to the snapCVE-2021-401607.8PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerabiCVE-2021-401617.8A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 versioCVE-2021-401627.8A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries CVE-2021-401637.8A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing componeCVE-2021-401647.8A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitraCVE-2021-401657.8A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer wCVE-2021-401667.8A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed wCVE-2021-401677.8A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by reaCVE-2021-40178.8showdoc is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-401706.8An RF replay attack vulnerability in the SecuritasHome home alarm system, version HPGW-G 0.0.2.23F BG_U-ITR-F1-BD_BL.A30.20181117, allows an
CVE-2021-40158: High severity, CVSS 7.8 | Vulnix