Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-33886

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. A malicious actor could leverage this vulnerability to execute arbitrary code.

Published

2022-10-03T15:15:17.017

Last Modified

2024-11-21T07:08:31.833

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-755
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application autodesk autocad < 2022.1.3 Yes
Application autodesk autocad < 2023.1.1 Yes
Application autodesk autocad_advance_steel < 2022.1.3 Yes
Application autodesk autocad_advance_steel < 2023.1.1 Yes
Application autodesk autocad_architecture < 2022.1.3 Yes
Application autodesk autocad_architecture < 2023.1.1 Yes
Application autodesk autocad_civil_3d < 2022.1.3 Yes
Application autodesk autocad_civil_3d < 2023.1.1 Yes
Application autodesk autocad_electrical < 2022.1.3 Yes
Application autodesk autocad_electrical < 2023.1.1 Yes
Application autodesk autocad_lt < 2022.1.3 Yes
Application autodesk autocad_lt < 2023.1.1 Yes
Application autodesk autocad_map_3d < 2022.1.3 Yes
Application autodesk autocad_map_3d < 2023.1.1 Yes
Application autodesk autocad_mechanical < 2022.1.3 Yes
Application autodesk autocad_mechanical < 2023.1.1 Yes
Application autodesk autocad_mep < 2022.1.3 Yes
Application autodesk autocad_mep < 2023.1.1 Yes
Application autodesk autocad_plant_3d < 2022.1.3 Yes
Application autodesk autocad_plant_3d < 2023.1.1 Yes
References