CVE-2021-40156: Autodesk Navisworks

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

Affected products

• Autodesk Navisworks: version 2019 only; version 2020 only; version 2021 only; version 2022 only

Published 2021-09-15. Last modified 2026-06-17.