1. Home
  2. CVE Database
  3. CVE-2022-27871
HIGH · 7.8

CVE-2022-27871

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulner...

Vulnerability Description

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Autodesk3Ds Max2021
AutodeskAdvance Steel2019
AutodeskAutocad2019
AutodeskAutocad Architecture2019
AutodeskAutocad Civil 3D2019
AutodeskAutocad Electrical2019
AutodeskAutocad Lt2019
AutodeskAutocad Map 3D2019
AutodeskAutocad Mechanical2019
AutodeskAutocad Mep2019
AutodeskAutocad Plant 3D2019
AutodeskDesign Review2018
AutodeskNavisworks2019
AutodeskRevit2020

Related Weaknesses (CWE)

CWE-770

References

FAQ

What is CVE-2022-27871?

CVE-2022-27871 is a vulnerability with a CVSS score of 7.8 (HIGH). Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulner...

How severe is CVE-2022-27871?

CVE-2022-27871 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-27871?

Check the references section above for vendor advisories and patch information. Affected products include: Autodesk 3Ds Max, Autodesk Advance Steel, Autodesk Autocad, Autodesk Autocad Architecture, Autodesk Autocad Civil 3D.