VULNERABILITY INTELLIGENCE

CVE-2022-27869

CVSS score7.8 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2022-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.

Weakness classification

  • CWE-125: Out-of-bounds Read
  • CWE-787: Out-of-bounds Write

Primary references