CVE-2022-42934: High severity Autodesk AutoCAD vulnerability
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-42934?
CVE-2022-42934 is a vulnerability that allows a malicious crafted .dwf or .pct file to cause memory corruption and potentially lead to code execution in the Autodesk DesignReview.exe application.
Which software products are affected by CVE-2022-42934?
The following Autodesk software products are affected by CVE-2022-42934: Autodesk Autocad (2019, 2020, 2021, 2022, 2023), Autodesk Autocad Advance Steel (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD Architecture (2019, 2020, 2021, 2022, 2023), Autodesk Autocad Civil 3d (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD Electrical (2019, 2020, 2021, 2022, 2023), Autodesk Autocad Lt (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD Map 3D (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD Mechanical (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD MEP (2019, 2020, 2021, 2022, 2023), Autodesk AutoCAD Plant 3D (2019, 2020, 2021, 2022, 2023), Autodesk Design Review (2018).
What is the severity level of CVE-2022-42934?
The severity level of CVE-2022-42934 is high, with a CVSS score of 7.8.
How does CVE-2022-42934 work?
CVE-2022-42934 works by exploiting a memory corruption vulnerability in the DesignReview.exe application through a specially crafted .dwf or .pct file, which can result in code execution in the current process.
Is there a fix available for CVE-2022-42934?
Users are advised to apply the security update provided by Autodesk to mitigate CVE-2022-42934 vulnerability.