Memory Corruption Vulnerability in Autodesk Design Review Application
CVE-2022-41306

7.8HIGH

Key Information:

Vendor
Autodesk
Status
AutodeskĀ® Design Review
Vendor
CVE Published:
14 October 2022

Summary

A crafted PCT file processed by the DesignReview.exe application can trigger a memory corruption issue due to a write access violation. This flaw, when combined with other vulnerabilities, poses a risk of code execution within the current process, significantly increasing the potential for exploitation.

Affected Version(s)

AutodeskĀ® Design Review 2018

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.