7.8

CVE-2022-33881

Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ Autocad Version2023
Autodesk ≫ Autocad Architecture Version2023
Autodesk ≫ Autocad Civil 3d Version2023
Autodesk ≫ Autocad Electrical Version2023
Autodesk ≫ Autocad Lt Version2023
Autodesk ≫ Autocad Map 3d Version2023
Autodesk ≫ Autocad Mechanical Version2023
Autodesk ≫ Autocad Mep Version2023
Autodesk ≫ Autocad Plant 3d Version2023
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.06% 0.199
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.