CVE-2021-40156

HIGH 7.8CVE-2021-40156 · Published 15/09/2021 · updated 17/06/2026

In short

CVE-2021-40156 is a HIGH (CVSS 7.8) vulnerability affecting navisworks (autodesk).
Chance of exploitation in the next 30 days (EPSS): 0.99%, higher than 62.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
navisworks autodesk	`= 2019= 2020= 2021= 2022`	No fix yet

Description

A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.

References

autodesk.com/trust/security-advisories/adsk-sa-2021-0009 · Vendor Advisory

More vulnerabilities in navisworks

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

navisworks

autodesk

= 2019= 2020= 2021= 2022

No fix yet

More vulnerabilities in navisworks

See all →