Out-of-bounds read in Autodesk Trueview
Priority LOW 34CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Why it matters now
EPSS 0.01437 73rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Autodesk Trueview | 2022.1.1 | — | No fix listed | CNA |
- Autodesk Trueview Vendor— Affected 2022.1.1 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* | 2019 to before 2019.1.4; 2020 to before 2020.1.5; 2021 to before 2021.1.2; 2022 to before 2022.1.2 | Vulnerable | Autodesk |
- cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* Versions 2019 to before 2019.1.4; 2020 to before 2020.1.5; 2021 to before 2021.1.2; 2022 to before 2022.1.2 Vulnerable ·Autodesk
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-27524
- 2026-10-03 Alias added: GHSA-4g4r-m9qf-wf8m
References
More Autodesk Dwg Trueview vulnerabilities
- TI-2026-13756 DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD CVSS 3.1HIGH 7.8
- TI-2025-01090 DWG File Parsing Out-of-Bounds Write Vulnerability CVSS 3.1HIGH 7.8
- TI-2025-01089 JPG File Parsing Heap-Based Overflow Vulnerability CVSS 3.1HIGH 7.8
- TI-2024-15259 Stack-based Overflow Vulnerability in the TrueViewTM Desktop Software CVSS 3.1HIGH 7.8
- TI-2022-20931 Uncontrolled search path in DWG TrueView CVSS 3.1HIGH 7.8
- TI-2022-09369 Out-of-bounds write in Autodesk Trueview CVSS 3.1HIGH 7.8
Sources
- CVE-2022-27524 · CVE Program
- CVE-2022-27524 · NVD
- FIRST EPSS
- GHSA-4g4r-m9qf-wf8m · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences