CVE-2022-27526
published 2022-04-18CVE-2022-27526: A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in…
PriorityP338high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.48%
71.0th percentile
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| autodesk | design_review | — | — |
| autodesk | design_review | — | — |
| autodesk | design_review | — | — |
| autodesk | design_review | — | — |
| autodesk | design_review | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
Fortinet
FortiGuard Labs Researcher Discovers Multiple Vulnerabilities in Multiple Autodesk Products: Autodesk Design Review, Autodesk Subassembly Composer, and More | FortiGuard Labs
blogs_fortinet·2022-10-20·CVSS 7.8
[HIGH] FortiGuard Labs Researcher Discovers Multiple Vulnerabilities in Multiple Autodesk Products: Autodesk Design Review, Autodesk Subassembly Composer, and More | FortiGuard Labs
FORTIGUARD LABS THREAT RESEARCH
FortiGuard Labs Researcher Discovers Multiple Vulnerabilities in Multiple Autodesk Products
By Kushal Arvind Shah | October 20, 2022
Late May 2022, I discovered and reported multiple zero-day vulnerabilities in Autodesk Design Review, Autodesk Subassembly Composer, Autodesk Moldflow Communicator, and Autodesk Dwg2Spd. Recently, Autodesk released several security patches, security patches, security patches, security patches & security patches which fixed them. These vulnerabilities are identified as CVE-2022-33883, CVE-2022-27525, CVE-2022-41306, CVE-2022-42934, CVE-2022-42935, CVE-2022-42936, CVE-2022-42937, CVE-2022-42933, CVE-2022-42943, CVE-2022-41310, CVE-2022-42040, CVE-2022-42939, CVE-2022-42942, CVE-2022-42941, CVE-2022-42938, CVE-2022-41309, CVE-20
Fortinet
Fortinet Security Researchers Discover Multiple Vulnerabilities in AutoDesk Products: DWG TrueView, Navisworks & Design Review
blogs_fortinet·2022-04-07·CVSS 7.8
[HIGH] Fortinet Security Researchers Discover Multiple Vulnerabilities in AutoDesk Products: DWG TrueView, Navisworks & Design Review
FORTIGUARD LABS THREAT RESEARCH
Fortinet Security Researchers Discover Multiple Vulnerabilities in AutoDesk Products: DWG TrueView, Navisworks & Design Review
By Kushal Arvind Shah and Yonghui Han | April 07, 2022
Towards the end of 2021, we discovered and reported multiple zero-day vulnerabilities in AutoDesk products: DWG TrueView, Design Review and Navisworks. Last week (the week of March 28, 2022), AutoDesk released several security patches (1, 2 & 3) which fixed them. These vulnerabilities are identified as CVE-2022-27525, CVE-2021-40167, CVE-2022-27526, CVE-2022-27527, CVE-2022-25797, CVE-2022-27523 and CVE-2022-27524. All these vulnerabilities have different root causes pertaining to the decoding of several file formats by the vulnerable AutoDesk products. Due to the severity of t
2022-04-18
Published