CVEvulnerability
CVE-2022-27864
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-07-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-415
Description
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Affected configurations
• autodesk design review 2011
• autodesk design review 2012
• autodesk design review 2013
• autodesk design review 2017
• autodesk design review 2018
Related
Weakness · CWE (1)
- CWE-415 Double Free weakness
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009 Patch, Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009 Patch, Vendor Advisory