CVE-2021-27039: Autodesk Autocad

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.

Affected products

• Autodesk Autocad: before 2022.1.1 (fixed in 2022.1.1)
• Autodesk Design Review: version 2011 only; version 2012 only; version 2013 only; version 2017 only; version 2018 only

Published 2021-07-09. Last modified 2026-06-17.