{"id":"CVE-2021-40162","aliases":["EUVD-2021-27347","GHSA-7479-jvwq-rgf3"],"status":"published","title":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be...","description":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00973,"percentile":0.62425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2022-10-07T00:00:00Z","modified":"2026-06-17T04:06:37Z","products":[{"vendor":"autodesk","product":"autocad"},{"vendor":"autodesk","product":"autocad_advance_steel"},{"vendor":"autodesk","product":"autocad_architecture"},{"vendor":"autodesk","product":"autocad_civil_3d"},{"vendor":"autodesk","product":"autocad_electrical"},{"vendor":"autodesk","product":"autocad_lt"},{"vendor":"autodesk","product":"autocad_map_3d"},{"vendor":"autodesk","product":"autocad_mechanical"},{"vendor":"autodesk","product":"autocad_mep"},{"vendor":"autodesk","product":"autocad_plant_3d"},{"vendor":"autodesk","product":"design_review"},{"vendor":"autodesk","product":"dwg_trueview"},{"vendor":"autodesk","product":"fusion"},{"vendor":"autodesk","product":"infrastructure_parts_editor"},{"vendor":"autodesk","product":"infraworks"},{"vendor":"autodesk","product":"inventor"},{"vendor":"autodesk","product":"navisworks"},{"vendor":"autodesk","product":"revit"},{"vendor":"autodesk","product":"storm_and_sanitary_analysis"}],"references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0011","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40162"},{"url":"https://github.com/advisories/GHSA-7479-jvwq-rgf3"}],"sources":{"cve":[{"id":"CVE-2021-40162","description":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.","status":"published","published":"2022-10-07T00:00:00Z","modified":"2024-08-04T02:27:31.539Z","updated_at":"2026-11-02T14:33:01.495293Z"}],"euvd":[{"id":"EUVD-2021-27347","description":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.","status":"published","published":"2022-10-07T00:00:00Z","modified":"2024-08-04T02:27:31Z","updated_at":"2026-11-03T03:24:21.368958Z"}],"ghsa":[{"id":"GHSA-7479-jvwq-rgf3","title":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be...","description":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.","status":"published","published":"2022-10-07T18:15:42Z","modified":"2023-02-02T05:01:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:51:14.661617Z"}],"nvd":[{"id":"CVE-2021-40162","description":"A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.","status":"published","published":"2022-10-07T18:15:14.383Z","modified":"2026-06-17T04:06:37.08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:06.906968Z"}]}}