Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-27529

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.

Published

2022-04-18T17:15:16.897

Last Modified

2024-11-21T06:55:53.340

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application autodesk advance_steel < 2019.1.4 Yes
Application autodesk advance_steel < 2020.1.5 Yes
Application autodesk advance_steel < 2021.1.2 Yes
Application autodesk advance_steel < 2022.1.2 Yes
Application autodesk autocad < 2019.1.4 Yes
Application autodesk autocad < 2020.1.5 Yes
Application autodesk autocad < 2021.1.2 Yes
Application autodesk autocad < 2022.1.2 Yes
Application autodesk autocad < 2022.2.2 Yes
Application autodesk autocad_architecture < 2019.1.4 Yes
Application autodesk autocad_architecture < 2020.1.5 Yes
Application autodesk autocad_architecture < 2021.1.2 Yes
Application autodesk autocad_architecture < 2022.1.2 Yes
Application autodesk autocad_electrical < 2019.1.4 Yes
Application autodesk autocad_electrical < 2020.1.5 Yes
Application autodesk autocad_electrical < 2021.1.2 Yes
Application autodesk autocad_electrical < 2022.1.2 Yes
Application autodesk autocad_lt < 2019.1.4 Yes
Application autodesk autocad_lt < 2020.1.5 Yes
Application autodesk autocad_lt < 2021.1.2 Yes
Application autodesk autocad_lt < 2022.1.2 Yes
Application autodesk autocad_lt < 2022.2.2 Yes
Application autodesk autocad_map_3d < 2019.1.4 Yes
Application autodesk autocad_map_3d < 2020.1.5 Yes
Application autodesk autocad_map_3d < 2021.1.2 Yes
Application autodesk autocad_map_3d < 2022.1.2 Yes
Application autodesk autocad_mechanical < 2019.1.4 Yes
Application autodesk autocad_mechanical < 2020.1.5 Yes
Application autodesk autocad_mechanical < 2021.1.2 Yes
Application autodesk autocad_mechanical < 2022.1.2 Yes
Application autodesk autocad_mep < 2019.1.4 Yes
Application autodesk autocad_mep < 2020.1.5 Yes
Application autodesk autocad_mep < 2021.1.2 Yes
Application autodesk autocad_mep < 2022.1.2 Yes
Application autodesk autocad_plant_3d < 2019.1.4 Yes
Application autodesk autocad_plant_3d < 2020.1.5 Yes
Application autodesk autocad_plant_3d < 2021.1.2 Yes
Application autodesk autocad_plant_3d < 2022.1.2 Yes
Application autodesk civil_3d < 2019.1.4 Yes
Application autodesk civil_3d < 2020.1.5 Yes
Application autodesk civil_3d < 2021.1.2 Yes
Application autodesk civil_3d < 2022.1.2 Yes
References