CVE-2022-42938

CVSS 7.8 HIGHEPSS 0.3%CWE-787

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 oct 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

n/a · Autodesk Design Review

Referencias

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0004