CVE-2021-40158

Description

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.443

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in AutoCAD MEP 2022.0.1Windows
Multiple Vulnerabilities are affected in AutoCAD MEP 2022.1.1Windows
Multiple Vulnerabilities are affected in AutoCAD Plant 3D 2022.0.1Windows
Multiple Vulnerabilities are affected in AutoCAD Plant 3D 2022.1.1Windows
Multiple Vulnerabilities are affected in AutoCAD Architecture 2022.0.1Windows
Multiple Vulnerabilities are affected in AutoCAD Electrical 2022.0.1Windows
Multiple Vulnerabilities are affected in AutoCAD MAP 3D 2022.0.1Windows
Multiple Vulnerabilities are affected in AutoCAD Mechanical 2022.0.1Windows
Multiple Vulnerabilities are affected in Autodesk Advance Steel 2022.0.1Windows
Multiple Vulnerabilities are affected in Autodesk Civil 3D 2022Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234