CVE-2021-27033

{"containers": {"cna": {"providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2026-06-19T13:33:30.640Z"}, "title": "Double Free File Parsing Vulnerability in Autodesk Design Review", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-415", "description": "CWE-415 Double Free", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-44", "descriptions": [{"lang": "en", "value": "CAPEC-44 Overflow Binary Resource File"}]}], "affected": [{"vendor": "Autodesk", "product": "Design Review", "versions": [{"status": "affected", "version": "2018.0.0, 2017.0.0, 2013.0.0, 2012.0.0, 2011.0.0", "lessThan": "2018.0.0", "versionType": "semver"}], "defaultStatus": "unaffected", "cpes": ["cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process."}]}], "references": [{"url": "https://www.autodesk.com/products/autodesk-access/overview", "tags": ["patch"]}, {"url": "https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Where-can-I-download-the-latest-update-of-AutoCAD-AutoCAD-LT-2022.html", "tags": ["patch"]}, {"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N"}}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T20:40:47.208Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004"}]}]}, "cveMetadata": {"assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "assignerShortName": "autodesk", "cveId": "CVE-2021-27033", "datePublished": "2021-07-09T14:12:16.000Z", "dateReserved": "2021-02-09T00:00:00.000Z", "dateUpdated": "2026-06-19T13:33:30.640Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.2"}

{}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Design Review", "vendor": "Autodesk", "versions": [{"lessThan": "2018.0.0", "status": "affected", "version": "2018.0.0, 2017.0.0, 2013.0.0, 2012.0.0, 2011.0.0", "versionType": "semver"}]}], "source": "psirt@autodesk.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:autodesk:design_review:2011:*:*:*:*:*:*:*", "matchCriteriaId": "83CF6CDF-806C-4DC5-B572-C1C2BC2C25F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2012:*:*:*:*:*:*:*", "matchCriteriaId": "2A78B6F8-DF84-4E6C-A247-0F6D2F8CA679", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2013:*:*:*:*:*:*:*", "matchCriteriaId": "DCD2CA9B-16E1-4BE7-A4E1-A9817A503958", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2017:*:*:*:*:*:*:*", "matchCriteriaId": "31F2529F-ECF0-4568-BBDC-82B396A52332", "vulnerable": true}, {"criteria": "cpe:2.3:a:autodesk:design_review:2018:*:*:*:*:*:*:*", "matchCriteriaId": "7D07C55F-1D23-4E2B-AC1E-67D735F800B7", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process."}, {"lang": "es", "value": "Una vulnerabilidad Double Free permite a los atacantes remotos ejecutar c\u00f3digo arbitrario en archivos PDF dentro de las instalaciones afectadas de Autodesk Design Review 2018, 2017, 2013, 2012, 2011. Se requiere la interacci\u00f3n del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una p\u00e1gina maliciosa o abrir un archivo malicioso"}], "id": "CVE-2021-27033", "lastModified": "2026-06-19T14:16:20.473", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 6.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "psirt@autodesk.com", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Secondary"}]}, "published": "2021-07-09T15:15:07.537", "references": [{"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/products/autodesk-access/overview"}, {"source": "psirt@autodesk.com", "url": "https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Where-can-I-download-the-latest-update-of-AutoCAD-AutoCAD-LT-2022.html"}, {"source": "psirt@autodesk.com", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004"}], "sourceIdentifier": "psirt@autodesk.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-415"}], "source": "psirt@autodesk.com", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-415"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}

{}