Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
References
Link | Resource |
---|---|
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-10-03 08:15
Updated : 2022-10-07 10:06
NVD link : CVE-2022-33884
Mitre link : CVE-2022-33884
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
autodesk
- autocad
- autocad_plant_3d
- autocad_mep
- autocad_advance_steel
- autocad_electrical
- autocad_civil_3d
- autocad_map_3d
- autocad_mechanical
- autocad_architecture
- autocad_lt