High severity7.8NVD Advisory· Published Jun 21, 2022· Updated Jun 17, 2026
CVE-2022-27871
CVE-2022-27871
Description
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
Affected products
56cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:advance_steel:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:advance_steel:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:macos:*:*
- cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_lt:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_lt:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:macos:*:*
- (no CPE)
- (no CPE)range: <9.1.17
cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_architecture:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_civil_3d:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_electrical:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_map_3d:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mechanical:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mep:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_plant_3d:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
- (no CPE)range: <9.1.17
cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:autodesk:navisworks:2019:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:navisworks:2020:*:*:*:*:*:*:*
- cpe:2.3:a:autodesk:navisworks:2022:*:*:*:*:*:*:*
- (no CPE)range: <9.1.17
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011nvdVendor Advisory
News mentions
0No linked articles in our index yet.