First published: Fri Oct 21 2022(Updated: )
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Credit: psirt@autodesk.com
Affected Software | Affected Version | How to fix |
---|---|---|
Autodesk AutoCAD 2024 | =2019 | |
Autodesk AutoCAD 2024 | =2020 | |
Autodesk AutoCAD 2024 | =2021 | |
Autodesk AutoCAD 2024 | =2022 | |
Autodesk AutoCAD LT for macOS | =2022 | |
Autodesk AutoCAD 2024 | =2023 | |
Autodesk AutoCAD Advance Steel | =2019 | |
Autodesk AutoCAD Advance Steel | =2020 | |
Autodesk AutoCAD Advance Steel | =2021 | |
Autodesk AutoCAD Advance Steel | =2022 | |
Autodesk AutoCAD Advance Steel | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
Autodesk Civil 3D | =2019 | |
Autodesk Civil 3D | =2020 | |
Autodesk Civil 3D | =2021 | |
Autodesk Civil 3D | =2022 | |
Autodesk Civil 3D | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
AutoCAD LT | =2019 | |
AutoCAD LT | =2020 | |
AutoCAD LT | =2021 | |
AutoCAD LT | =2022 | |
Autodesk AutoCAD LT for macOS | =2022 | |
AutoCAD LT | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
AutoCAD | =2019 | |
AutoCAD | =2020 | |
AutoCAD | =2021 | |
AutoCAD | =2022 | |
AutoCAD | =2023 | |
Autodesk Design Review 2011 | =2018 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-42940 is a vulnerability that can lead to memory corruption in Autodesk applications when a malicious crafted TGA file is consumed through DesignReview.exe.
Autodesk Autocad versions 2019, 2020, 2021, 2022, 2023, Autodesk Autocad Advance Steel versions 2019, 2020, 2021, 2022, 2023, Autodesk AutoCAD Architecture versions 2019, 2020, 2021, 2022, 2023, Autodesk Autocad Civil 3d versions 2019, 2020, 2021, 2022, 2023, Autodesk AutoCAD Electrical versions 2019, 2020, 2021, 2022, 2023, Autodesk Autocad Lt versions 2019, 2020, 2021, 2022, 2023, Autodesk AutoCAD Map 3D versions 2019, 2020, 2021, 2022, 2023, Autodesk AutoCAD Mechanical versions 2019, 2020, 2021, 2022, 2023, Autodesk AutoCAD MEP versions 2019, 2020, 2021, 2022, 2023, and Autodesk AutoCAD Plant 3D versions 2019, 2020, 2021, 2022, 2023 are affected by CVE-2022-42940.
CVE-2022-42940 has a severity score of 7.8, which is classified as high.
To fix CVE-2022-42940, it is recommended to apply the security updates provided by Autodesk. Please refer to the official Autodesk Security Advisory for more information and patches.
You can find more information about CVE-2022-42940 in the official Autodesk Security Advisory: [Autodesk Security Advisory](https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004)