CVE-2022-27866

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-27866

creationtimestamp| type| source ---|---|--- 2022-07-30 00:13:56+00:00| seen| https://t.me/cibsecurity/47299...

CVE-2022-27866

CVE-2022-27866 affects Autodesk Design Review’s DesignReview.exe: processing a malicious TIFF can trigger out-of-bounds reads during TIFF parsing, enabling potential code execution in the current process. The issue is described as a TIFF parsing buffer/bounds error; attack vector is LOCAL with US...