PT-2022-11196 · Autodesk · Autodesk Image Processing

Published 2022-10-07 · Updated 2022-10-11 · CVE-2021-40162

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk Image Processing component (affected versions not specified)

Description The issue arises when parsing maliciously crafted TIF, PICT, TGA, or RLC files, which can cause the component to read beyond allocated boundaries. This can potentially be exploited to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2021-40162

Affected Products

Autodesk Image Processing

References · 4

• https://autodesk.com/trust/security-advisories/adsk-sa-2021-0011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40162 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40162 · Security Note
• https://t.me/cibsecurity/51004 · Telegram Post