CVEvulnerability

CVE-2022-27871

7.8 HIGH Published 2022-06-21 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-21
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-770

Description

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Affected configurations

• autodesk 3ds max 2021 • autodesk 3ds max 2022 • autodesk advance steel 2019 • autodesk advance steel 2020 • autodesk advance steel 2021 • autodesk advance steel 2022 • autodesk autocad 2019 • autodesk autocad 2020 • autodesk autocad 2021 • autodesk autocad 2022 • autodesk autocad architecture 2019 • autodesk autocad architecture 2020 • autodesk autocad architecture 2021 • autodesk autocad architecture 2022 • autodesk autocad civil 3d 2019 • autodesk autocad civil 3d 2020 • autodesk autocad civil 3d 2021 • autodesk autocad civil 3d 2022 • autodesk autocad electrical 2019 • autodesk autocad electrical 2020 • autodesk autocad electrical 2021 • autodesk autocad electrical 2022 • autodesk autocad lt 2019 • autodesk autocad lt 2020 • autodesk autocad lt 2021 • autodesk autocad lt 2022 • autodesk autocad map 3d 2019 • autodesk autocad map 3d 2020 • autodesk autocad map 3d 2021 • autodesk autocad map 3d 2022 • autodesk autocad mechanical 2019 • autodesk autocad mechanical 2020 • autodesk autocad mechanical 2021 • autodesk autocad mechanical 2022 • autodesk autocad mep 2019 • autodesk autocad mep 2020 • autodesk autocad mep 2021 • autodesk autocad mep 2022 • autodesk autocad plant 3d 2019 • autodesk autocad plant 3d 2020 • autodesk autocad plant 3d 2021 • autodesk autocad plant 3d 2022 • autodesk design review 2018 • autodesk navisworks 2019 • autodesk navisworks 2020 • autodesk navisworks 2022 • autodesk revit 2020 • autodesk revit 2021 • autodesk revit 2022

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References