Code injection

2022-04-1817:15:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.

CPENameOperatorVersion
advance_steelge2022
advance_steellt2022.1.2
advance_steelge2019
advance_steellt2019.1.4
advance_steelge2020
advance_steellt2020.1.5
advance_steelge2021
advance_steellt2021.1.2
autocadge2022
autocadlt2022.2.2

Name	Operator	Version
advance_steel	ge	2022
advance_steel	lt	2022.1.2
advance_steel	ge	2019
advance_steel	lt	2019.1.4
advance_steel	ge	2020
advance_steel	lt	2020.1.5
advance_steel	ge	2021
advance_steel	lt	2021.1.2
autocad	ge	2022
autocad	lt	2022.2.2