CVE-2022-33881 — Out-of-bounds Read in Autocad

CWE-125 — Out-of-bounds Read3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 80.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Autodesk AutocadAutodesk Autocad Advance SteelAutodesk Autocad Architecture+7 more
Timeline
PublishedJul 29
Latest updateJul 30

Description

Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages10 packages

🔴Vulnerability Details

2
GHSA
GHSA-x3vr-wjhc-m9p7: Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries↗2022-07-30
▶
CVEList
CVE-2022-33881: Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries↗2022-07-29
▶
CVE-2022-33881 — Out-of-bounds Read in Autodesk Autocad | cvebase