Heap Buffer Overflow in Autodesk Design Review and AutoCAD Products
CVE-2022-33889

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Autodesk® Design Review, Autodesk® Advance Steel, Autodesk® Civil 3d®
Vendor
CVE Published:
3 October 2022

Summary

This vulnerability allows an attacker to exploit the processing of maliciously crafted GIF or JPEG files within Autodesk Design Review 2018, AutoCAD 2023, and AutoCAD 2022. If successful, it can lead to arbitrary code execution due to writing beyond the allocated heap buffer, posing significant risks to users of these applications. It is crucial for users to apply appropriate security measures and updates to mitigate potential threats.

Affected Version(s)

Autodesk® Design Review, Autodesk® Advance Steel, Autodesk® Civil 3D® 2018, 2023, 2022

References

https://www.autodesk.com/trust/security-advisories/adsk-s...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.