CVE-2022-27870

2022-06-2114:23:36

autodesk

www.cve.org

0.001 Low

EPSS

Percentile

30.4%

JSON

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.

CNA Affected

[
  {
    "product": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2023"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

0.001 Low

EPSS

Percentile

30.4%

JSON

Related for CVELIST:CVE-2022-27870