cbcvebase.
CVE-2022-27871
published 2022-06-21

CVE-2022-27871: Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated…

PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.73%
50.0th percentile
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Affected

49 ranges· showing 25
VendorProductVersion rangeFixed in
autodesk3ds_max——
autodesk3ds_max——
autodeskadvance_steel——
autodeskadvance_steel——
autodeskadvance_steel——
autodeskadvance_steel——
autodeskautocad——
autodeskautocad——
autodeskautocad——
autodeskautocad——
autodeskautocad_architecture——
autodeskautocad_architecture——
autodeskautocad_architecture——
autodeskautocad_architecture——
autodeskautocad_civil_3d——
autodeskautocad_civil_3d——
autodeskautocad_civil_3d——
autodeskautocad_civil_3d——
autodeskautocad_electrical——
autodeskautocad_electrical——
autodeskautocad_electrical——
autodeskautocad_electrical——
autodeskautocad_lt——
autodeskautocad_lt——
autodeskautocad_lt——

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.