high7.8
CVE-2022-27871
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated bu…
Impact
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | 3ds Max | Versions 2021, 2022 |
| Autodesk | Advance Steel | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Architecture | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Civil 3d | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Electrical | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Lt | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Map 3d | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Mechanical | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Mep | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Autocad Plant 3d | Versions 2019, 2020, 2021, 2022 |
| Autodesk | Design Review | Version 2018 |