CVE-2022-27867CWE-416

CVE-2022-27867

High · published June 21, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00823 · 56.9th percentile
Weakness
CWE-416 · Use After Free
Published
2022-06-21T19:15Z
Affected products (4)
ProductVersionsFixed in
autodesk/autocadall versions—
autodesk/autocadall versions—
autodesk/autocadall versions—
autodesk/autocadall versions—
References (2)
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 · [email protected]https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 JUN 14:23Z
    A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability
    cvelistv5