CVE-2022-27530: Buffer Overflow
A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-27530?
CVE-2022-27530 is a vulnerability in Autodesk AutoCAD 2022, 2021, 2020, 2019 that allows a maliciously crafted TIF or PICT file to write beyond the allocated buffer through a buffer overflow vulnerability, potentially leading to arbitrary code execution.
Which software versions are affected by CVE-2022-27530?
Autodesk Advance Steel versions 2019 to 2019.1.4, 2020 to 2020.1.5, 2021 to 2021.1.2, and 2022 to 2022.1.2, as well as Autodesk AutoCAD versions 2019 to 2019.1.4, 2020 to 2020.1.5, 2021 to 2021.1.2, 2022 to 2022.1.2, and 2022.2.2 for macOS, and other related software are affected by CVE-2022-27530.
What is the severity of CVE-2022-27530?
CVE-2022-27530 has a severity rating of 7.8 (high).
How do I fix CVE-2022-27530?
Update Autodesk AutoCAD and related software to the latest version available, as suggested in the security advisory provided by Autodesk: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004
What are the CWE IDs associated with CVE-2022-27530?
CVE-2022-27530 is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) and CWE-787 (Out-of-bounds Write).