CVE-2022-42933: High severity Autodesk AutoCAD vulnerability
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-42933?
CVE-2022-42933 is a memory corruption vulnerability in Autodesk AutoCAD and related software versions 2019 through 2023, and Autodesk Design Review 2018.
How severe is CVE-2022-42933?
CVE-2022-42933 has a severity score of 7.8, which is considered high.
Which software versions are affected by CVE-2022-42933?
Autodesk AutoCAD versions 2019 through 2023, and Autodesk Design Review 2018 are affected by CVE-2022-42933.
What is the vulnerability in Autodesk AutoCAD?
The vulnerability in Autodesk AutoCAD is a memory corruption vulnerability that can be triggered by consuming a malicious crafted .dwf or .pct file using the DesignReview.exe application.
Is there a fix available for CVE-2022-42933?
Yes, users should apply the necessary security patch provided by Autodesk to fix CVE-2022-42933.