Code injection

Due to lack of proper memory management, when a victim opens manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restar...

Stack overflow

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41172

CVE-2022-41172 affects SAP 3D Visual Enterprise Author (v9) and relates to the DXF file parsing code. The issue stems from improper memory management during parsing of DXF payloads (e.g., AutoCAD .dxf with TeighaTranslator.exe), potentially allowing Remote Code Execution via a stack-based overflo...

Autodesk AutoCAD PDF File Buffer Overflow Vulnerability

Autodesk AutoCAD is a professional set of 3D drawing software from Autodesk, Inc. A buffer overflow vulnerability exists in versions prior to Autodesk AutoCAD 2023.1.1, which stems from an unhandled exception in parsing maliciously crafted PDF files, and can be exploited by attackers to cause a...

CVE-2022-41173

Due to lack of proper memory management, when a victim opens manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restar...

PT-2022-25689 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to inadequate memory management. When a manipulated AutoCAD .dwg file from untrusted sources is opened in SAP 3D Visual Enterprise Author, it can trigger Remote Code...

CVE-2022-41167

SAP 3D Visual Enterprise Author (v9) contains a DWG file parsing vulnerability in TeighaTranslator.exe that can lead to Remote Code Execution. The issue stems from parsing DWG data and can be triggered by crafted files, with two related variants described as use-after-free and buffer/stack overfl...

CVE-2022-41189

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41173

SAP 3D Visual Enterprise Author v9 is affected by CVE-2022-41173 through improper memory management when parsing manipulated DXF files (AutoCAD/DXF via TeighaTranslator.exe). The issue can cause the application to crash, making it temporarily unavailable, and some connected advisories describe po...

CVE-2022-41190

The CVE-2022-41190 entry concerns SAP 3D Visual Enterprise Viewer (up to version 9). The vulnerability arises from improper memory management while parsing DXF files (and related TeighaTranslator.exe usage) which can lead to memory corruption, including a stack-based overflow or reuse of a dangli...

PT-2022-25712 · Sap +1 · Sap 3D Visual Enterprise Viewer +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Viewer version 9 Description: The issue arises due to improper memory management. When a victim opens a manipulated AutoCAD .dwg file in SAP 3D Visual Enterprise Viewer, it can trigger Remote Code Execution. This occu...

CVE-2022-41189

CVE-2022-41189 affects SAP 3D Visual Enterprise Viewer (version 9) and is triggered by parsing manipulated DWG files (AutoCAD/DWG with TeighaTranslator.exe) due to insufficient memory management. The vulnerability allows remote code execution via a stack-based overflow or reuse of a dangling poin...

PT-2022-25695 · Autodesk +1 · Autocad +1

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management. When a manipulated AutoCAD .dxf file from untrusted sources is opened, it can trigger a Remote Code Execution. This occurs when the...

CVE-2022-41172

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41189

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41190

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dxf, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2022-41167

Due to lack of proper memory management, when a victim opens a manipulated AutoCAD .dwg, TeighaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflo...

CVE-2021-40162

CVE-2021-40162 affects Autodesk Image Processing: a vulnerability where parsing TIFF/PICT/TGA/RLC files may cause reads beyond allocated boundaries, enabling arbitrary code execution. Root cause is in the image-processing component's handling of external image formats. Impact is high (AV Local, U...

CVE-2022-33889

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution...

CVE-2022-33887

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...