Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

46 records

Priority LOW 36

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00417 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00417 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00417 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00417 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00428 Published 2022-10-21 No fix listed CWE-787
Priority LOW 36

A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00442 Published 2022-10-14 No fix listed CWE-787
Priority LOW 35

A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00656 Published 2022-10-03 No fix listed CWE-787
TI-2022-10746 CVE-2022-27864 · GHSA-v58j-mm8h-fph5

Double free in Autodesk Design Review

Priority MEDIUM 40

A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01166 Published 2022-07-29 No fix listed CWE-415
TI-2022-10748 CVE-2022-27866 · GHSA-jp2j-9fj2-83hc

Out-of-bounds read in Autodesk Design Review

Priority LOW 34

A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0024 Published 2022-07-29 No fix listed CWE-125
Priority LOW 34

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0024 Published 2022-07-29 No fix listed CWE-787
Load more