What’s Vulnerable › Vulnerabilities

CVE-2022-27871

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-21 · updated 2026-06-17
• Weakness: CWE-770

Description

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Affected products

• Autodesk 3ds Max: 2021, 2022
• Autodesk Advance Steel: 2019, 2020, 2021, 2022
• Autodesk AutoCAD: 2019, 2020, 2021, 2022
• Autodesk AutoCAD Architecture: 2019, 2020, 2021, 2022
• Autodesk Autocad Civil 3D: 2019, 2020, 2021, 2022
• Autodesk AutoCAD Electrical: 2019, 2020, 2021, 2022
• Autodesk AutoCAD LT: 2019, 2020, 2021, 2022
• Autodesk AutoCAD MAP 3D: 2019, 2020, 2021, 2022
• Autodesk AutoCAD Mechanical: 2019, 2020, 2021, 2022
• Autodesk AutoCAD MEP: 2019, 2020, 2021, 2022
• Autodesk AutoCAD Plant 3D: 2019, 2020, 2021, 2022
• Autodesk Design Review: 2018
• Autodesk Navisworks: 2019, 2020, 2022
• Autodesk Revit: 2020, 2021, 2022

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0011

Get alerted when CVE-2022-27871 or the next vulnerability affects your stack