CVE-2022-27532

2022-06-1615:47:00

autodesk

www.cve.org

autodesk

3ds max

tif file

buffer overflow

vulnerability

arbitrary code execution

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

32.5%

JSON

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.

CNA Affected

[
  {
    "product": "Autodesk 3ds Max",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2020, 2021"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0010