Memory Corruption Vulnerability in Autodesk Design Review

CVE-2021-40167

What is CVE-2021-40167?

The vulnerability allows specially crafted DWF or PCT files to be processed by the DesignReview.exe application, resulting in a memory corruption issue due to read access violations. This flaw may be exploited in conjunction with other vulnerabilities, potentially enabling arbitrary code execution within the context of the affected application. Organizations using Autodesk Design Review should assess their exposure to risk and apply necessary mitigations.

References