CVE-2021-40160: High severity autodesk revit 2025 vulnerability
PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-40160?
CVE-2021-40160 is a vulnerability in PDFTron prior to version 9.0.7 that allows for the execution of arbitrary code by forcing the application to read beyond allocated boundaries when parsing a malicious PDF file.
Which software versions are affected by CVE-2021-40160?
CVE-2021-40160 affects Autodesk Revit versions 2020 and 2021, Autodesk Navisworks versions 2019, 2020, and 2021, Autodesk Advance Steel version 2022, and Autodesk AutoCAD versions 2022 and 2022.2, among others.
How severe is CVE-2021-40160?
CVE-2021-40160 has a severity score of 7.8 (high severity).
How can I fix CVE-2021-40160?
To fix CVE-2021-40160, you should update PDFTron to version 9.0.7 or later. Make sure to download the latest version from the official PDFTron website.
Where can I find more information about CVE-2021-40160?
You can find more information about CVE-2021-40160 in the Autodesk security advisory AD-SK-SA-2021-0010, available at the following link: https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010