CVE-2022-33885 — Out-of-bounds Write in Autocad

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
7.8HIGHNVD
EPSS
0.1%
top 69.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
10
Autodesk AutocadAutodesk Autocad Advance SteelAutodesk Autocad Architecture+7 more
Timeline
PublishedOct 3
Latest updateOct 4

Description

A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages10 packages

▶NVDautodesk/autocad2022 — 2022.1.3+1
▶NVDautodesk/autocad_lt2022 — 2022.1.3+1
▶NVDautodesk/autocad_mep2022 — 2022.1.3+1
▶NVDautodesk/autocad_map_3d2022 — 2022.1.3+1
▶NVDautodesk/autocad_civil_3d2022 — 2022.1.3+1

🔴Vulnerability Details

2
GHSA
GHSA-7prf-2475-634w: A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer↗2022-10-04
▶
CVEList
CVE-2022-33885: A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer↗2022-10-03
▶
CVE-2022-33885 — Out-of-bounds Write in Autocad | cvebase