CVE-2022-27529

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.76%

Published

Apr 18, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787

Affected Products (42)

autodesk · advance_steel (up to 2019.1.4)vulnerable

autodesk · advance_steel (up to 2020.1.5)vulnerable

autodesk · advance_steel (up to 2021.1.2)vulnerable

autodesk · advance_steel (up to 2022.1.2)vulnerable

autodesk · autocad (up to 2019.1.4)vulnerable

autodesk · autocad (up to 2020.1.5)vulnerable

autodesk · autocad (up to 2021.1.2)vulnerable

autodesk · autocad (up to 2022.1.2)vulnerable

autodesk · autocad (up to 2022.2.2)vulnerable

autodesk · autocad_architecture (up to 2019.1.4)vulnerable

autodesk · autocad_architecture (up to 2020.1.5)vulnerable

autodesk · autocad_architecture (up to 2021.1.2)vulnerable

autodesk · autocad_architecture (up to 2022.1.2)vulnerable

autodesk · autocad_electrical (up to 2019.1.4)vulnerable

autodesk · autocad_electrical (up to 2020.1.5)vulnerable

autodesk · autocad_electrical (up to 2021.1.2)vulnerable

autodesk · autocad_electrical (up to 2022.1.2)vulnerable

autodesk · autocad_lt (up to 2019.1.4)vulnerable

autodesk · autocad_lt (up to 2020.1.5)vulnerable

autodesk · autocad_lt (up to 2021.1.2)vulnerable

autodesk · autocad_lt (up to 2022.1.2)vulnerable

autodesk · autocad_lt (up to 2022.2.2)vulnerable

autodesk · autocad_map_3d (up to 2019.1.4)vulnerable

autodesk · autocad_map_3d (up to 2020.1.5)vulnerable

autodesk · autocad_map_3d (up to 2021.1.2)vulnerable

autodesk · autocad_map_3d (up to 2022.1.2)vulnerable

autodesk · autocad_mechanical (up to 2019.1.4)vulnerable

autodesk · autocad_mechanical (up to 2020.1.5)vulnerable

autodesk · autocad_mechanical (up to 2021.1.2)vulnerable

autodesk · autocad_mechanical (up to 2022.1.2)vulnerable

autodesk · autocad_mep (up to 2019.1.4)vulnerable

autodesk · autocad_mep (up to 2020.1.5)vulnerable

autodesk · autocad_mep (up to 2021.1.2)vulnerable

autodesk · autocad_mep (up to 2022.1.2)vulnerable

autodesk · autocad_plant_3d (up to 2019.1.4)vulnerable

autodesk · autocad_plant_3d (up to 2020.1.5)vulnerable

autodesk · autocad_plant_3d (up to 2021.1.2)vulnerable

autodesk · autocad_plant_3d (up to 2022.1.2)vulnerable

autodesk · civil_3d (up to 2019.1.4)vulnerable

autodesk · civil_3d (up to 2020.1.5)vulnerable

autodesk · civil_3d (up to 2021.1.2)vulnerable

autodesk · civil_3d (up to 2022.1.2)vulnerable

References (2)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs