Out-of-bounds read in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD®…
Priority LOW 37CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.
Why it matters now
EPSS 0.01604 75th percentileScored 2026-11-07
Fix Fixed Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac: 9.0.7
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac | before 9.0.7 | 9.0.7 | Patch available | CNA |
- Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac Vendor— Affected before 9.0.7 Fixed in 9.0.7 Patch available CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* | 2020 to before 2020.2.5; 2021 to before 2021.1.4; 2022 to before 2022.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:* | 2019 to before 2019.6; 2020 to before 2020.4; 2021 to before 2021.3; 2022 to before 2022.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:* | 2022 to before 2022.2 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:* | 2022 to before 2022.2 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
- cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* Versions 2020 to before 2020.2.5; 2021 to before 2021.1.4; 2022 to before 2022.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:* Versions 2019 to before 2019.6; 2020 to before 2020.4; 2021 to before 2021.3; 2022 to before 2022.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:* Versions 2022 to before 2022.2 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:* Versions 2022 to before 2022.2 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* | 2022 to before 2022.1.1 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:* | 2018 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:* | 2018 hotfix | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:* | 2018 hotfix2 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:* | 2018 hotfix3 | Vulnerable | Autodesk |
| cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:* | 2018 hotfix4 | Vulnerable | Autodesk |
- cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* Versions 2022 to before 2022.1.1 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:* Versions 2018 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:* Versions 2018 hotfix Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:* Versions 2018 hotfix2 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:* Versions 2018 hotfix3 Vulnerable ·Autodesk
- cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:* Versions 2018 hotfix4 Vulnerable ·Autodesk
Remediation
- Fix · CNA Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD® Architecture, AutoCAD® Electrical, AutoCAD® Map 3D, AutoCAD® Mechanical, AutoCAD® MEP, AutoCAD® Plant 3D, AutoCAD® LT, Autodesk® Civil 3D, AutoCAD® Mac, AutoCAD® LT for Mac Fixed in 9.0.7
Timeline
- 2026-10-02 Threatist record created from CVE-2021-40160
- 2026-10-03 Alias added: GHSA-3xmw-g98x-jm5w
References
More Autodesk Advance Steel vulnerabilities
- TI-2021-17340 Out-of-bounds read in Inventor CVSS 3.1HIGH 7.8
- TI-2021-17341 Information disclosure in Inventor CVSS 3.1HIGH 7.8
- TI-2022-09360 Out-of-bounds write in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD… CVSS 3.1HIGH 7.8
- TI-2024-15258 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software CVSS 3.1HIGH 7.8
- TI-2021-08615 Improper handling of exceptional conditions in Autodesk Advanced Steel, Civil 3D… CVSS 3.1HIGH 7.8
- TI-2019-05247 Uncontrolled search path in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT… CVSS 3.0HIGH 7.8
Sources
- CVE-2021-40160 · CVE Program
- CVE-2021-40160 · NVD
- FIRST EPSS
- GHSA-3xmw-g98x-jm5w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences