CVE-2021-40164: Autodesk Autocad
High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Affected products
- Autodesk Autocad: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Advance Steel: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Architecture: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Civil 3d: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Electrical: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Lt: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2020, before 2020.3.2 (fixed in 2020.3.2); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2021, before 2021.2.2 (fixed in 2021.2.2); from 2022, before 2022.1.2 (fixed in 2022.1.2); …
- Autodesk Autocad Map 3d: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Mechanical: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Mep: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Autocad Plant 3d: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)
- Autodesk Design Review: version 2018 only
- Autodesk Dwg Trueview: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.1 (fixed in 2022.1.1)
- Autodesk Fusion: from 2.0.10356, before 2.0.11405 (fixed in 2.0.11405)
- Autodesk Infrastructure Parts Editor: from 2019, before 2019.2.2 (fixed in 2019.2.2); from 2020, before 2020.0.2 (fixed in 2020.0.2); version 2021 only; version 2022 only
- Autodesk Infraworks: from 2019, before 2019.3 (fixed in 2019.3); from 2020, before 2020.2 (fixed in 2020.2); from 2021, before 2021.2 (fixed in 2021.2); version 2019.3 only; version 2020.2 only; version 2021.2 only; …
- Autodesk Inventor: from 2019, before 2019.6 (fixed in 2019.6); from 2020, before 2020.5 (fixed in 2020.5); from 2021, before 2021.4 (fixed in 2021.4); from 2022, before 2022.2 (fixed in 2022.2)
- Autodesk Navisworks: from 2019, before 2019.7 (fixed in 2019.7); from 2020, before 2020.5 (fixed in 2020.5); from 2021, before 2021.4 (fixed in 2021.4); from 2022, before 2022.2 (fixed in 2022.2)
- Autodesk Revit: from 2019, before 2019.2.4 (fixed in 2019.2.4); from 2020, before 2020.2.6 (fixed in 2020.2.6); from 2021, before 2021.1.5 (fixed in 2021.1.5); version 2022 only
- Autodesk Storm And Sanitary Analysis: from 2020, before 2020.3.1 (fixed in 2020.3.1); from 2021, before 2021.3.1 (fixed in 2021.3.1); version 2019 only; version 2022 only
Published 2022-10-07. Last modified 2026-06-17.