Memory Corruption Vulnerability in Autodesk Design Review Application
CVE-2022-42938

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Autodesk Design Review
Vendor
CVE Published:
21 October 2022

Summary

A specially crafted TGA file processed by the Autodesk Design Review application could trigger a memory corruption issue, potentially allowing an attacker to execute arbitrary code within the context of the current user process. This risk heightens when combined with other existing vulnerabilities, necessitating immediate attention to secure the application.

Affected Version(s)

Autodesk Design Review 2018, 2017, 2013, 2012, 2011

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.