CVE-2022-27529

Published: Apr 18, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.

Affected (42)

Products: Autodesk: Advance Steel, Autocad, Autocad Architecture, Autocad Electrical, Autocad Lt, Autocad Map 3d, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Civil 3d

10 products

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Autodesk Advance Steel	2019 ≤ version < 2019.1.4
Autodesk Advance Steel	2020 ≤ version < 2020.1.5
Autodesk Advance Steel	2021 ≤ version < 2021.1.2
Autodesk Advance Steel	2022 ≤ version < 2022.1.2
Autodesk Autocad	2019 ≤ version < 2019.1.4
Autodesk Autocad	2020 ≤ version < 2020.1.5
Autodesk Autocad	2021 ≤ version < 2021.1.2
Autodesk Autocad	2022 ≤ version < 2022.1.2
Autodesk Autocad	2022 ≤ version < 2022.2.2
Autodesk Autocad Architecture	2019 ≤ version < 2019.1.4
Autodesk Autocad Architecture	2020 ≤ version < 2020.1.5
Autodesk Autocad Architecture	2021 ≤ version < 2021.1.2
Autodesk Autocad Architecture	2022 ≤ version < 2022.1.2
Autodesk Autocad Electrical	2019 ≤ version < 2019.1.4
Autodesk Autocad Electrical	2020 ≤ version < 2020.1.5
Autodesk Autocad Electrical	2021 ≤ version < 2021.1.2
Autodesk Autocad Electrical	2022 ≤ version < 2022.1.2
Autodesk Autocad Lt	2019 ≤ version < 2019.1.4
Autodesk Autocad Lt	2020 ≤ version < 2020.1.5
Autodesk Autocad Lt	2021 ≤ version < 2021.1.2
Autodesk Autocad Lt	2022 ≤ version < 2022.1.2
Autodesk Autocad Lt	2022 ≤ version < 2022.2.2
Autodesk Autocad Map 3d	2019 ≤ version < 2019.1.4
Autodesk Autocad Map 3d	2020 ≤ version < 2020.1.5
Autodesk Autocad Map 3d	2021 ≤ version < 2021.1.2
Autodesk Autocad Map 3d	2022 ≤ version < 2022.1.2
Autodesk Autocad Mechanical	2019 ≤ version < 2019.1.4
Autodesk Autocad Mechanical	2020 ≤ version < 2020.1.5
Autodesk Autocad Mechanical	2021 ≤ version < 2021.1.2
Autodesk Autocad Mechanical	2022 ≤ version < 2022.1.2
Autodesk Autocad Mep	2019 ≤ version < 2019.1.4
Autodesk Autocad Mep	2020 ≤ version < 2020.1.5
Autodesk Autocad Mep	2021 ≤ version < 2021.1.2
Autodesk Autocad Mep	2022 ≤ version < 2022.1.2
Autodesk Autocad Plant 3d	2019 ≤ version < 2019.1.4
Autodesk Autocad Plant 3d	2020 ≤ version < 2020.1.5
Autodesk Autocad Plant 3d	2021 ≤ version < 2021.1.2
Autodesk Autocad Plant 3d	2022 ≤ version < 2022.1.2
Autodesk Civil 3d	2019 ≤ version < 2019.1.4
Autodesk Civil 3d	2020 ≤ version < 2020.1.5
Autodesk Civil 3d	2021 ≤ version < 2021.1.2
Autodesk Civil 3d	2022 ≤ version < 2022.1.2

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Source: psirt@autodesk.com

Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.