CVE-2022-33881: High severity autodesk autocad 2024 vulnerability
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-33881?
CVE-2022-33881 is a vulnerability in Autodesk AutoCAD 2023 that allows the parsing of a maliciously crafted PRT file to read beyond allocated boundaries, potentially leading to code execution.
What is the severity of CVE-2022-33881?
CVE-2022-33881 has a severity rating of 7.8 out of 10 (high).
Which software versions are affected by CVE-2022-33881?
Autodesk AutoCAD 2023 and related versions, including Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D.
How can CVE-2022-33881 be exploited?
CVE-2022-33881 can be exploited by parsing a specially crafted PRT file.
Is there a fix available for CVE-2022-33881?
For information on the fix or mitigation for CVE-2022-33881, please refer to the advisory provided by Autodesk: [Autodesk Security Advisory ADK-SA-2022-0014](https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0014)