https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010%3B

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007

Autodesk https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010%3B [No types assigned]

Autodesk https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010;

https://www.cve.org/CVERecord?id=CVE-2022-25795 [No Types Assigned]

https://www.cve.org/CVERecord?id=CVE-2022-25795 [No Types Assigned]

A maliciously crafted PDF file can be used to dereference for a write beyond the allocated buffer while parsing PDFTron files. The vulnerability exists because the application fails to handle a crafted PDFTron file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files.

NIST AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NIST (AV:N/AC:M/Au:N/C:P/I:P/A:P)

NIST CWE-755

OR
     *cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* versions up to (excluding) 2019.1.4
     *cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* versions from (including) 2020 up to (excluding) 2020.1.5
     *cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* versions from (including) 2021 up to (excluding) 2021.1.2
     *cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* versions from (including) 2022 up to (excluding) 2022.1.2

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010; No Types Assigned

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010; Broken Link, Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 No Types Assigned

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007 Vendor Advisory

Victim must voluntarily interact with attack mechanism

A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code

A maliciously crafted PDF file can be used to dereference for a write beyond the allocated buffer while parsing PDFTron files. The vulnerability exists because the application fails to handle a crafted PDFTron file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010; [No Types Assigned]