High severity · published Jul 29, 2022
CVE-2022-27865
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Autodesk Design Review ·
2018, 2017, 2013, 2012, 2011 · source: vendor
DR
Design Review · Autodesk
2011; 2012; 2013; 2017; 2018; 2018; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27865
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27865
Patch
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0009
More from Autodesk Design Review
8.8
CVE-2022-27864
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations
7.8
CVE-2022-42944
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
7.8
CVE-2022-42940
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
7.8
CVE-2022-42941
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
7.8
CVE-2022-42942
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation