CVE-2022-33888: High severity autodesk autocad 2024 vulnerability
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-33888.
What is the affected software?
The affected software includes Autodesk Autocad, Autodesk Autocad Advance Steel, Autodesk AutoCAD Architecture, Autodesk Autocad Civil 3d, Autodesk AutoCAD Electrical, Autodesk Autocad Lt, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D.
What is the severity of CVE-2022-33888?
The severity of CVE-2022-33888 is high, with a CVSS score of 7.8.
How does CVE-2022-33888 impact the system?
CVE-2022-33888 could lead to memory corruption vulnerability by write access violation, which, in conjunction with other vulnerabilities, could result in code execution in the context of the current process.
How can I fix CVE-2022-33888?
To fix CVE-2022-33888, it is recommended to update the affected Autodesk DWG application to a version between 2022.1.3 and 2023.1.1, depending on the specific software.