CVE-2021-27033

8.1 HIGH
Published: July 09, 2021 Modified: June 19, 2026
View on NVD

Description

A maliciously crafted PDF file, when opened by a user in Autodesk Design Review, can trigger a Double Free vulnerability in the Autodesk Design Review application. A malicious actor may leverage this vulnerability to cause memory corruption and execute arbitrary code in the context of the current process.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://www.autodesk.com/products/autodesk-access/overview
Source: psirt@autodesk.com
https://www.autodesk.com/support/technical/article/caas/sfdcarticles/sfdcarticles/Where-can-I-download-the-latest-update-of-AutoCAD-AutoCAD-LT-2022.html
Source: psirt@autodesk.com
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
Source: psirt@autodesk.com
Vendor Advisory
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

4 reference(s) from NVD

Quick Stats

CVSS v3 Score
8.1 / 10.0
EPSS (Exploit Probability)
3.0%
86th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-415 CWE-415

Affected Vendors

autodesk

Related CVEs

CVE-2026-57278 8.3
CVE-2026-57277 8.3
CVE-2026-57276 8.3
CVE-2026-57275 8.3
CVE-2026-57274 8.3