high7.8
CVE-2022-33885
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer.
Impact
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Autocad | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Advance Steel | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Architecture | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Civil 3d | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Electrical | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Lt | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Map 3d | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Mechanical | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Mep | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |
| Autodesk | Autocad Plant 3d | from 2022 before 2022.1.3 from 2023 before 2023.1.1 |