{"id":"CVE-2021-27039","aliases":["EUVD-2021-13810","GHSA-hqq5-x2f6-hpmv"],"status":"published","title":"A maliciously crafted TIFF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced to read...","description":"A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01613,"percentile":0.76291,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2021-07-09T14:18:21Z","modified":"2026-06-17T03:44:10Z","products":[{"vendor":"autodesk","product":"autocad"},{"vendor":"autodesk","product":"design_review"}],"references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27039"},{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0003"},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-22-505/"},{"url":"https://github.com/advisories/GHSA-hqq5-x2f6-hpmv"}],"sources":{"cve":[{"id":"CVE-2021-27039","description":"A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.","status":"published","published":"2021-07-09T14:18:21Z","modified":"2024-08-03T20:40:47.228Z","updated_at":"2026-11-02T14:33:04.360272Z"}],"euvd":[{"id":"EUVD-2021-13810","description":"A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.","status":"published","published":"2021-07-09T14:18:21Z","modified":"2024-08-03T20:40:47Z","updated_at":"2026-11-03T03:24:50.383074Z"}],"ghsa":[{"id":"GHSA-hqq5-x2f6-hpmv","title":"A maliciously crafted TIFF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced to read...","description":"A maliciously crafted TIFF file in Autodesk 2018, 2017, 2013, 2012, 2011 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.","status":"published","published":"2022-05-24T19:07:21Z","modified":"2023-01-30T05:00:39Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:46:14.926249Z"}],"nvd":[{"id":"CVE-2021-27039","description":"A maliciously crafted TIFF and PCX file can be forced to read and write beyond allocated boundaries when parsing the TIFF and PCX file for based overflow. This vulnerability can be exploited to execute arbitrary code.","status":"published","published":"2021-07-09T15:15:08.407Z","modified":"2026-06-17T03:44:10.43Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:55.259633Z"}]}}