VYPR

Autocad Advance Steel

by Autodesk

CVEs (26)

  • CVE-2022-42940HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2022-42936HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-42935HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2021-40166HigOct 7, 2022
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.

  • CVE-2021-40162HigOct 7, 2022
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

  • CVE-2022-33884HigOct 3, 2022
    risk 0.49cvss 7.5epss 0.03

    Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Page 2 of 2