VYPR
← All advisories
High severity7.8NVD Advisory· Published Jul 29, 2022· Updated Jun 17, 2026

CVE-2022-27865

CVE-2022-27865

Description

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.

Affected products

12
  • Autodesk/Design Review11 versions
    cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:autodesk:design_review:2011:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2012:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2013:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2017:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
    • (no CPE)
  • DesignReview/DesignReview.exedescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.