VYPR
← All advisories
High severity7.8NVD Advisory· Published Oct 3, 2022· Updated Jun 17, 2026

CVE-2022-33889

CVE-2022-33889

Description

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.

Affected products

21
  • Autodesk/Autocad3 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: <2022.1.3
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: <2022.1.3
    • (no CPE)
  • Autodesk/Autocad Advance Steel
    cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Civil 3d
    cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: <2022.1.3
  • Autodesk/Design Review10 versions
    cpe:2.3:a:autodesk:design_review:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:autodesk:design_review:*:*:*:*:*:*:*:*range: <2018
    • cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix2:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix6:*:*:*:*:*:*
    • cpe:2.3:a:autodesk:design_review:2018:hotfix:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.