Yüksek CVSS 7.8

CVE-2021-40158: Advance Steel: sınır dışı okuma

Yayın: 25 Ocak 2022 23:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Özet bilgiler

Ürün: Autodesk Advance Steel
CVSS v3.1: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: %2,89 (yüzdelik 87)
CWE: CWE-125
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
autodesk-advance-steel	2022	—	2022.1.2
autodesk-autocad	2022	—	2022.1.2
autodesk-autocad-architecture	2022	—	2022.1.2
autodesk-autocad-electrical	2022	—	2022.1.2
autodesk-autocad-lt	2022	—	2022.1.2
autodesk-autocad-map-3d	2022	—	2022.1.2
autodesk-autocad-mechanical	2022	—	2022.1.2
autodesk-autocad-mep	2022	—	2022.1.2
autodesk-autocad-plant-3d	2022	—	2022.1.2
autodesk-civil-3d	2022	—	2022.1.2
autodesk-inventor	2022	—	2022.2
autodesk-inventor	2019	2019	—
autodesk-inventor	2020	2020	—
autodesk-inventor	2021	2021	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları