vulnerability
AutoDesk AutoCAD: CVE-2022-33889: Applications and services that utilize Image Processing component used by Autodesk products may be impacted by Out-of-bound Read, Heap-based Overflow, Out-of-bound Write, Memory corruption, and Use-after-free vulnerabilities.
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:M/Au:N/C:C/I:C/A:C) | Dec 14, 2022 | Jul 22, 2025 | Jul 22, 2025 |
Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Dec 14, 2022
Added
Jul 22, 2025
Modified
Jul 22, 2025
Description
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review, AutoCAD 2023, 2022, 2021, and 2020 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
Solution
autodesk-autocad-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.