CVE-2022-27870

2022-06-2114:23:36

autodesk

www.cve.org

tga file

autodesk autocad 2023

vulnerability

arbitrary code

EPSS

0.001

Percentile

30.2%

JSON

A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.

CNA Affected

[
  {
    "product": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2023"
      }
    ]
  }
]

References

www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

EPSS

0.001

Percentile

30.2%

JSON

Related for CVELIST:CVE-2022-27870