Memory Corruption Vulnerability in Autodesk Design Review Software

CVE-2022-42933

What is CVE-2022-42933?

A vulnerability in Autodesk's Design Review application can be exploited through specially crafted .dwf or .pct files, potentially leading to a memory corruption scenario due to write access violations. When malicious files are opened in the DesignReview.exe process, this could allow unauthorized code execution in the context of the current process, especially when combined with other vulnerabilities.

References