NetSight
IP …
high7.8

CVE-2022-27529

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT…

Impact

A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Architecture
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Electrical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Lt
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Map 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mep
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskCivil 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2

Weakness classification

CWE-787

References