CVE-2021-40158
Summary
| CVE | CVE-2021-40158 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-01-25 20:15:00 UTC |
| Updated | 2022-11-16 04:05:00 UTC |
| Description | A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Autodesk | Advance Steel | All | All | All | All |
| Application | Autodesk | Autocad | All | All | All | All |
| Application | Autodesk | Autocad Architecture | All | All | All | All |
| Application | Autodesk | Autocad Electrical | All | All | All | All |
| Application | Autodesk | Autocad Lt | All | All | All | All |
| Application | Autodesk | Autocad Map 3d | All | All | All | All |
| Application | Autodesk | Autocad Mechanical | All | All | All | All |
| Application | Autodesk | Autocad Mep | All | All | All | All |
| Application | Autodesk | Autocad Plant 3d | All | All | All | All |
| Application | Autodesk | Civil 3d | All | All | All | All |
| Application | Autodesk | Inventor | All | All | All | All |
| Application | Autodesk | Inventor | 2019 | All | All | All |
| Application | Autodesk | Inventor | 2020 | All | All | All |
| Application | Autodesk | Inventor | 2021 | All | All | All |
| Application | Autodesk | Inventor | 2022 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| ZDI-22-441 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-452 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-281 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-453 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-466 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-454 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-287 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-455 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-286 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-447 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-283 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-450 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-451 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-448 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-449 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| Security Advisories | Autodesk Trust Center | MISC | www.autodesk.com | |
| ZDI-22-443 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-288 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-444 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-445 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-285 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| ZDI-22-284 | Zero Day Initiative | MISC | www.zerodayinitiative.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.