Vulnerability Description
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.
CVSS Score
7.8
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Autodesk | Navisworks | >= 2019, < 2019.6 |
Related Weaknesses (CWE)
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010Vendor Advisory
FAQ
What is CVE-2022-27527?
CVE-2022-27527 is a vulnerability with a CVSS score of 7.8 (HIGH). A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.
How severe is CVE-2022-27527?
CVE-2022-27527 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-27527?
Check the references section above for vendor advisories and patch information. Affected products include: Autodesk Navisworks.