vulnerability
AutoDesk AutoCAD: CVE-2022-27870: Double Free, Heap Overflow, Out-of-bound Read/Write, Use-After-Free, Type Confusion, Memory Corruption
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:M/Au:N/C:P/I:P/A:P) | Jan 14, 2022 | Jul 28, 2025 | Jul 28, 2025 |
Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jan 14, 2022
Added
Jul 28, 2025
Modified
Jul 28, 2025
Description
A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.
Solution
autodesk-autocad-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.