CVE-2022-41189
published 2022-10-11CVE-2022-41189: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D…
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.63%
49.7th percentile
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | 3d_visual_enterprise_viewer | < 9.0 | 9.0 |
| sap_se | sap_3d_visual_enterprise_viewer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP 3D Visual Enterprise Viewer 9 AutoCAD File TeighaTranslator.exe memory corruption (EUVD-2022-44430)
vuldb·2026-07-30·CVSS 7.8
CVE-2022-41189 [HIGH] SAP 3D Visual Enterprise Viewer 9 AutoCAD File TeighaTranslator.exe memory corruption (EUVD-2022-44430)
A vulnerability categorized as critical has been discovered in SAP 3D Visual Enterprise Viewer 9. This impacts an unknown function of the file TeighaTranslator.exe of the component AutoCAD File Handler. The manipulation results in memory corruption.
This vulnerability is reported as CVE-2022-41189. The attack can be launched remotely. No exploit exists.
It is best practice to apply a patch to resolve this issue.
GHSA
GHSA-h323-f6f7-37j8: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (
ghsa_unreviewed·2022-10-12
CVE-2022-41189 [HIGH] CWE-119 GHSA-h323-f6f7-37j8: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published