CVEvulnerability
CVE-2022-41306
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-10-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected configurations
• autodesk design review 2018
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022 Patch, Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022 Patch, Vendor Advisory