CVE-2022-41307

2022-10-1400:00:00

autodesk

www.cve.org

malicious

pkt file

subassemblycomposer.exe

memory corruption

vulnerability

code execution

EPSS

0.001

Percentile

28.5%

JSON

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Subassembly Composer",
    "versions": [
      {
        "version": "2023, 2022, 2021, 2021",
        "status": "affected"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020

EPSS

0.001

Percentile

28.5%

JSON

Related for CVELIST:CVE-2022-41307