CVE-2021-29117: Esri Arcreader

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.

Affected products

• Esri Arcreader: up to and including 10.8.1

Published 2022-08-12. Last modified 2026-06-17.