CVE-2022-33881
First published: Fri Jul 29 2022(Updated: )
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Credit: psirt@autodesk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autodesk Autocad | =2023 | |
| Autodesk Autocad Advance Steel | =2023 | |
| Autodesk AutoCAD Architecture | =2023 | |
| Autodesk Autocad Civil 3d | =2023 | |
| Autodesk AutoCAD Electrical | =2023 | |
| Autodesk Autocad Lt | =2023 | |
| Autodesk AutoCAD Map 3D | =2023 | |
| Autodesk AutoCAD Mechanical | =2023 | |
| Autodesk AutoCAD MEP | =2023 | |
| Autodesk AutoCAD Plant 3D | =2023 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-33881?
CVE-2022-33881 is a vulnerability in Autodesk AutoCAD 2023 that allows the parsing of a maliciously crafted PRT file to read beyond allocated boundaries, potentially leading to code execution.
What is the severity of CVE-2022-33881?
CVE-2022-33881 has a severity rating of 7.8 out of 10 (high).
Which software versions are affected by CVE-2022-33881?
Autodesk AutoCAD 2023 and related versions, including Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D.
How can CVE-2022-33881 be exploited?
CVE-2022-33881 can be exploited by parsing a specially crafted PRT file.
Is there a fix available for CVE-2022-33881?
For information on the fix or mitigation for CVE-2022-33881, please refer to the advisory provided by Autodesk: [Autodesk Security Advisory ADK-SA-2022-0014](https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0014)
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/autodesk
- canonical/autodesk autocad
- version/autodesk autocad/2023
- canonical/autodesk autocad advance steel
- version/autodesk autocad advance steel/2023
- canonical/autodesk autocad architecture
- version/autodesk autocad architecture/2023
- canonical/autodesk autocad civil 3d
- version/autodesk autocad civil 3d/2023
- canonical/autodesk autocad electrical
- version/autodesk autocad electrical/2023
- canonical/autodesk autocad lt
- version/autodesk autocad lt/2023
- canonical/autodesk autocad map 3d
- version/autodesk autocad map 3d/2023
- canonical/autodesk autocad mechanical
- version/autodesk autocad mechanical/2023
- canonical/autodesk autocad mep
- version/autodesk autocad mep/2023
- canonical/autodesk autocad plant 3d
- version/autodesk autocad plant 3d/2023