CVE-2021-27038

CVE-2021-27038 is a real vulnerability in Autodesk Design Review affecting 2011–2018 versions, caused by a type-confusion bug in PDF parsing that can lead to remote code execution. Exploitation details in public advisories indicate that user interaction is required (e.g., opening a crafted PDF or...

CVE-2019-7363

CVE-2019-7363 describes a use-after-free vulnerability in Autodesk Design Review for versions 2011, 2012, 2013 and 2018. The issue arises when processing malicious DWF files, which may leverage the use-after-free to achieve code execution. Connected records reiterate the same core details (root c...

CVE-2019-7362

Autodesk Design Review (Windows) is affected by a DLL preloading vulnerability (CVE-2019-7362) in ADR versions 2011, 2012, 2013, and 2018. The issue allows code execution if a user opens a malicious DWF file, due to how a DLL is loaded. Root cause: DLL preloading. Exploitation details, affected b...

CVE-2021-27035

CVE-2021-27035 affects Autodesk Design Review 2011–2018 (pre-2018 hotfix 4). The issue occurs when parsing TIFF, PICT, TGA or DWF files, where reads beyond allocated boundaries can occur, potentially enabling code execution in the context of the affected process when combined with other vulnerabi...

CVE-2022-27525

Autodesk AutoCAD/Design Review vulnerability CVE-2022-27525: A crafted .dwf or .pct file processed by DesignReview.exe can cause memory corruption via a write access violation, potentially enabling code execution in the current process. Affected product: Autodesk Design Review (and related Autode...

CVE-2021-27036

CVE-2021-27036 describes a buffer overflow in parsing multiple image/graphic formats (PCX, PICT, RCL, TIF/TIFF, BMP, PSD, PDF) that can allow remote code execution. The Red Hat advisory reproduces the description: a maliciously crafted file can write beyond the allocated buffer during parsing, en...

CVE-2022-27526

The CVE-2022-27526 issue affects Autodesk Design Review. A maliciously crafted TGA file could trigger a memory corruption in DesignReview.exe, potentially enabling code execution in the context of the current process. Exploitation is consistent with a local attack requiring user interaction (per ...

CVE-2021-27039

The CVE-2021-27039 entry describes a buffer/heap-based overflow when parsing TIFF and PCX files in Autodesk Design Review (and related Autodesk tooling such as AutoCAD context). The underlying issue is improper bounds/length validation during TIFF/PCX parsing, enabling read/write beyond allocated...

CVE-2021-27033

CVE-2021-27033 is a Double Free vulnerability in Autodesk Design Review’s PDF parsing. Affected ADR versions (2011, 2012, 2013, 2017, 2018) can be exploited remotely by a user opening a malicious PDF/file or visiting a malicious page, leading to arbitrary code execution. The flaw stems from impro...

CVE-2021-27037

Summary: CVE-2021-27037 affects Autodesk Design Review (multiple years). A maliciously crafted PNG, PDF or DWF file can trigger a use-after-free during parsing, enabling arbitrary code execution. Connected advisories corroborate remote code execution vectors requiring user action (e.g., opening a...

CVE-2022-27865

The CVE-2022-27865 entry describes a buffer-overflow vulnerability in Autodesk Design Review’s DesignReview.exe when parsing TGA and PCX files. A maliciously crafted TGA/PCX file can cause writes beyond the allocated buffer, enabling arbitrary code execution. Affected software: Autodesk Design Re...

CVE-2021-27034

Gleaned from connected docs: CVE-2021-27034 affects Autodesk Design Review (versions prior to 2018 hotfix 4 as per Nessus adsk-sa-2021-0003) and involves a heap-based buffer overflow during parsing of PICT, PCX, RCL or TIFF files. The root cause is improper bounds/length validation in the parsing...

CVE-2022-27864

CVE-2022-27864 concerns Autodesk Design Review (DesignReview.exe). The issue is a Double Free vulnerability that allows remote code execution through PDFs opened in affected installations. Exploitation requires user interaction: the target must visit a malicious page or open a malicious file. Mul...

CVE-2022-27866

CVE-2022-27866 affects Autodesk Design Review’s DesignReview.exe: processing a malicious TIFF can trigger out-of-bounds reads during TIFF parsing, enabling potential code execution in the current process. The issue is described as a TIFF parsing buffer/bounds error; attack vector is LOCAL with US...