Vulnerability · Published Apr 13, 2022 · Assigned by autodesk
CVE-2022-27524
High 7.1
In plain English
A high-severity security flaw in Autodesk Trueview. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Severity (CVSS NVD)7.1High
Exploit odds (30 days)1.4%top 26.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Autodesk Trueview | 2022.1.1 |
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 x_refsource_MISC