PT-2022-11199 · Autodesk · Autodesk Image Processing

Published 2022-10-07 · Updated 2022-10-11 · CVE-2021-40165

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk Image Processing component (affected versions not specified)

Description A maliciously crafted TIFF, PICT, TGA, or RLC file may be used to write beyond the allocated buffer while parsing these files, potentially allowing for the execution of arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2021-40165

Affected Products

Autodesk Image Processing

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-40165 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2021-0011 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40165 · Vendor Advisory