Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:infraworks:2021.2:hotfix_1:*:*:*:*:*:*

part: a version: 2021.2 update: hotfix_1

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductInfraworks (a2f43427-9706-5b11-9a80-c77ac9503b68)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25005 vulnerable 2026-06-08 05:56:08.346908 Details available
A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.
Published: 2023-05-12T00:00:00.000Z
Updated: 2025-01-27T17:43:10.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40166 vulnerable 2026-06-08 05:35:17.255879 Details available
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-04T02:27:31.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40165 vulnerable 2026-06-08 05:35:17.252965 Details available
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-04T02:27:31.537Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40164 vulnerable 2026-06-08 05:35:17.250072 Details available
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-04T02:27:31.502Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40163 vulnerable 2026-06-08 05:35:17.244449 Details available
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.
Published: 2022-10-07T00:00:00.000Z
Updated: 2024-08-04T02:27:31.853Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40162 vulnerable 2026-06-08 05:35:17.235648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.