Autodesk Design Review vulnerabilities
46 known vulnerabilities affecting autodesk/design_review.
Total CVEs
46
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH41MEDIUM3
Vulnerabilities
Page 2 of 3
CVE-2021-40166P3HIGHCVSS 7.8v20182022-10-07
CVE-2021-40166 [HIGH] CWE-416 CVE-2021-40166: A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
nvd
CVE-2021-40163P3HIGHCVSS 7.8v20182022-10-07
CVE-2021-40163 [HIGH] CWE-787 CVE-2021-40163: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files t
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.
nvd
CVE-2022-41306P3HIGHCVSS 7.8v20182022-10-14
CVE-2022-41306 [HIGH] CWE-787 CVE-2022-41306: A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memo
A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-41309P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-41309 [HIGH] CWE-787 CVE-2022-41309: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42936P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42936 [HIGH] CWE-787 CVE-2022-42936: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-41310P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-41310 [HIGH] CWE-787 CVE-2022-41310: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42937P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42937 [HIGH] CWE-787 CVE-2022-42937: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42934P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42934 [HIGH] CWE-787 CVE-2022-42934: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42935P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42935 [HIGH] CWE-787 CVE-2022-42935: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42933P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42933 [HIGH] CWE-787 CVE-2022-42933: A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2021-40161P3HIGHCVSS 7.8v20182021-12-23
CVE-2021-40161 [HIGH] CWE-787 CVE-2021-40161: A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files t
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.
nvd
CVE-2019-7363P3HIGHCVSS 7.8v2011v2012+2 more2019-08-23
CVE-2019-7363 [HIGH] CWE-416 CVE-2019-7363: Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attac
Use-after-free vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An attacker may trick a user into opening a malicious DWF file that may leverage a use-after-free vulnerability, which may result in code execution.
nvd
CVE-2015-8572P3MEDIUMCVSS 6.8v20132015-12-15
CVE-2015-8572 [MEDIUM] CWE-119 CVE-2015-8572: Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attacker
Multiple buffer overflows in Autodesk Design Review (ADR) before 2013 Hotfix 2 allow remote attackers to execute arbitrary code via crafted RLE data in a (1) BMP or (2) FLI file, (3) encoded scan lines in a PCX file, or (4) DataSubBlock or (5) GlobalColorTable in a GIF file.
nvd
CVE-2022-33890P3HIGHCVSS 7.8v20182022-10-03
CVE-2022-33890 [HIGH] CWE-787 CVE-2022-33890: A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42943P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42943 [HIGH] CWE-787 CVE-2022-42943: A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead t
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42944P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42944 [HIGH] CWE-787 CVE-2022-42944: A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead t
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42941P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42941 [HIGH] CWE-787 CVE-2022-42941: A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead t
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42942P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42942 [HIGH] CWE-787 CVE-2022-42942: A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead t
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42940P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42940 [HIGH] CWE-787 CVE-2022-42940: A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd
CVE-2022-42939P3HIGHCVSS 7.8v20182022-10-21
CVE-2022-42939 [HIGH] CWE-787 CVE-2022-42939: A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
nvd