First published: Tue Jun 21 2022(Updated: )
A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.
Credit: psirt@autodesk.com
Affected Software | Affected Version | How to fix |
---|---|---|
Autodesk Autocad | =2023 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2022-27870.
The severity score of CVE-2022-27870 is 7.8 (high).
CVE-2022-27870 may be exploited in Autodesk AutoCAD 2023 to execute arbitrary code.
It is recommended to apply the necessary security updates provided by Autodesk to fix CVE-2022-27870.
You can find more information about CVE-2022-27870 on the Autodesk Security Advisories website: https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004