VYPR
← All advisories
High severity8.8NVD Advisory· Published Jul 29, 2022· Updated Jun 17, 2026

CVE-2022-27864

CVE-2022-27864

Description

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

12
  • Autodesk/Design Review11 versions
    cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2012:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2013:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2017:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
    • (no CPE)
  • DesignReview/DesignReview.exedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.