CVE-2022-27529: High severity autodesk autocad advance steel vulnerability
A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-27529.
What software versions are affected?
Autodesk AutoCAD versions 2019 to 2022, Autodesk Advance Steel versions 2019 to 2022, Autodesk AutoCAD Architecture versions 2019 to 2022, Autodesk AutoCAD Electrical versions 2019 to 2022, Autodesk AutoCAD LT versions 2019 to 2022, Autodesk AutoCAD Map 3D versions 2019 to 2022, Autodesk AutoCAD Mechanical versions 2019 to 2022, Autodesk AutoCAD MEP versions 2019 to 2022, Autodesk AutoCAD Plant 3D versions 2019 to 2022, and Autodesk Civil 3D versions 2019 to 2022 are affected.
What is the severity of CVE-2022-27529?
The severity of CVE-2022-27529 is high, with a CVSS score of 7.8.
How can this vulnerability be exploited?
This vulnerability can be exploited by using a maliciously crafted PICT, BMP, PSD, or TIF file.
Is there a fix for CVE-2022-27529?
Yes, Autodesk has released a security advisory with a patch to address this vulnerability. Please refer to the Autodesk website for more information.