CVE-2022-41306

HIGH

DesignReview.exe - Memory Corruption

Title source: llm

Description

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

References (1)

[Patch, Vendor Advisory] https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0022

Scores

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 19.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-787

Status published

Affected Products (1)

autodesk/design_review

Timeline

Published Oct 14, 2022

Tracked Since Feb 18, 2026