CVE-2022-27871

Published: Jun 21, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Affected (51)

Products: Autodesk: 3ds Max, Advance Steel, Autocad, Autocad Architecture, Autocad Civil 3d, Autocad Electrical, Autocad Lt, Autocad Map 3d, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Design Review, Navisworks, Revit

14 products

Configuration A

51 vulnerable

Vulnerable Software	Affected Versions
Autodesk 3ds Max	Version 2021
Autodesk 3ds Max	Version 2022
Autodesk Advance Steel	Version 2019
Autodesk Advance Steel	Version 2020
Autodesk Advance Steel	Version 2021
Autodesk Advance Steel	Version 2022
Autodesk Autocad	Version 2019
Autodesk Autocad	Version 2020
Autodesk Autocad	Version 2021
Autodesk Autocad	Version 2022
Autodesk Autocad	Version 2022
Autodesk Autocad Architecture	Version 2019
Autodesk Autocad Architecture	Version 2020
Autodesk Autocad Architecture	Version 2021
Autodesk Autocad Architecture	Version 2022
Autodesk Autocad Civil 3d	Version 2019
Autodesk Autocad Civil 3d	Version 2020
Autodesk Autocad Civil 3d	Version 2021
Autodesk Autocad Civil 3d	Version 2022
Autodesk Autocad Electrical	Version 2019
Autodesk Autocad Electrical	Version 2020
Autodesk Autocad Electrical	Version 2021
Autodesk Autocad Electrical	Version 2022
Autodesk Autocad Lt	Version 2019
Autodesk Autocad Lt	Version 2020
Autodesk Autocad Lt	Version 2021
Autodesk Autocad Lt	Version 2022
Autodesk Autocad Lt	Version 2022
Autodesk Autocad Map 3d	Version 2019
Autodesk Autocad Map 3d	Version 2020
Autodesk Autocad Map 3d	Version 2021
Autodesk Autocad Map 3d	Version 2022
Autodesk Autocad Mechanical	Version 2019
Autodesk Autocad Mechanical	Version 2020
Autodesk Autocad Mechanical	Version 2021
Autodesk Autocad Mechanical	Version 2022
Autodesk Autocad Mep	Version 2019
Autodesk Autocad Mep	Version 2020
Autodesk Autocad Mep	Version 2021
Autodesk Autocad Mep	Version 2022
Autodesk Autocad Plant 3d	Version 2019
Autodesk Autocad Plant 3d	Version 2020
Autodesk Autocad Plant 3d	Version 2021
Autodesk Autocad Plant 3d	Version 2022
Autodesk Design Review	Version 2018
Autodesk Navisworks	Version 2019
Autodesk Navisworks	Version 2020
Autodesk Navisworks	Version 2022
Autodesk Revit	Version 2020
Autodesk Revit	Version 2021
Autodesk Revit	Version 2022

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011

Source: psirt@autodesk.com

Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.