CVE-2022-27870

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code...

CVE-2022-27870

CVE-2022-27870 affects Autodesk AutoCAD 2023 (and prior AutoCAD versions per CNVD) and is caused by writing beyond the allocated buffer while parsing TGA files, enabling arbitrary code execution. The Red Hat entry reiterates the same description. CVSS scores are provided (2.0/3.1) with base score...

CVE-2022-27868

Autodesk AutoCAD 2023 is affected by CVE-2022-27868 via a use-after-free in the CATPart/CAT parsing path when processing a malicious CAT file. The underlying issue is a parsing/use-after-free flaw that can lead to code execution in the context of the current process. Multiple sources (including Z...

CVE-2022-27868

A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-27867

CVE-2022-27867 affects Autodesk AutoCAD 2019–2022 where a maliciously crafted JT file can trigger a use-after-free vulnerability, potentially enabling code execution. The core issue is a use-after-free in the handling of JT data (as described in multiple sources such as NVD/Red Hat/CNVD/CVE listi...

CVE-2022-27867

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-27871

CVE-2022-27871 affects Autodesk AutoCAD product suite, Revit, Design Review and Navisworks when using PDFTron prior to 9.1.17. The root cause is a boundary error while parsing PDF files, which can allow writing beyond the allocated buffer. This may enable arbitrary code execution on the affected ...

CVE-2022-27871

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code...

CVE-2022-27869

A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-27869

Autodesk AutoCAD 2023 contains a TIFF parsing vulnerability (CVE-2022-27869) where a malicious TIFF can cause reads/writes beyond allocated boundaries, enabling arbitrary code execution. Affected: AutoCAD 2023 (TIFF processing). Root cause: bounds-related issue in TIFF parsing. Exploitation detai...

Autodesk AutoCAD 资源管理错误漏洞

Autodesk AutoCAD is a professional 3D drawing software from Autodesk Inc. A security vulnerability exists in Autodesk AutoCAD version 2023, which can be exploited by attackers to execute arbitrary code...

Autodesk Navisworks 安全漏洞

Autodesk Navisworks is 3D model review software for architecture, engineering, and construction from Autodesk, Inc. A security vulnerability exists in Autodesk Navisworks 2022 and prior versions, which stems from the application's inability to process produced PDF files, and can be exploited by a...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from writing beyond the allocated buffer when parsing TGA files, and can be exploited by attackers to execute arbitrary code...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a professional 3D drawing software from Autodesk, Inc. A security vulnerability exists in Autodesk AutoCAD 2023 and prior versions, which stems from the fact that when parsing TIFF files, an attacker could be forced to read or write beyond the allocated boundaries and could us...

Autodesk Fusion360 代码问题漏洞

Autodesk Fusion360 is a 3D CAD drawing tool from Autodesk, Inc. A code issue vulnerability exists in Autodesk Fusion360 version 2.0.12887, which arises from an application that does not adequately validate user-supplied XML input during insertion of an SVG when parsing a specially crafted SVG fil...

CVE-2022-27531

A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-27532

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution...

CVE-2022-27532

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution...

CVE-2022-27532

A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution...

CVE-2022-27531

A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...