CVE-2021-27042

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files

published June 25, 2021

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01797 · 78.3th percentile
Published
2021-06-25T12:41Z
EPSS history
Timeline
  • 25 JUN 12:41Z
    A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files
    cvelistv5