CVE-2022-41190
published 2022-10-11CVE-2022-41190: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D…
PriorityP339high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.64%
50.4th percentile
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | 3d_visual_enterprise_viewer | < 9.0 | 9.0 |
| sap_se | sap_3d_visual_enterprise_viewer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP 3D Visual Enterprise Viewer 9 AutoCAD File TeighaTranslator.exe memory corruption (EUVD-2022-44431)
vuldb·2026-07-30·CVSS 7.8
CVE-2022-41190 [HIGH] SAP 3D Visual Enterprise Viewer 9 AutoCAD File TeighaTranslator.exe memory corruption (EUVD-2022-44431)
A vulnerability identified as critical has been detected in SAP 3D Visual Enterprise Viewer 9. Affected is an unknown function of the file TeighaTranslator.exe of the component AutoCAD File Handler. This manipulation causes memory corruption.
This vulnerability appears as CVE-2022-41190. The attack may be initiated remotely. There is no available exploit.
It is recommended to apply a patch to fix this issue.
GHSA
GHSA-4r85-6v4c-4qcq: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (
ghsa_unreviewed·2022-10-12
CVE-2022-41190 [HIGH] CWE-119 GHSA-4r85-6v4c-4qcq: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (
Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published