Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lea...

CVE-2022-42938 · published 4 years ago
Summary

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
autodesk autocad 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*
autodesk autocad_advance_steel 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_advance_steel:2019:*:*:*:*:*:*:*
autodesk autocad_architecture 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_architecture:2019:*:*:*:*:*:*:*
autodesk autocad_civil_3d 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_civil_3d:2019:*:*:*:*:*:*:*
autodesk autocad_electrical 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_electrical:2019:*:*:*:*:*:*:*
autodesk autocad_lt 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_lt:2019:*:*:*:*:*:*:*
autodesk autocad_map_3d 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_map_3d:2019:*:*:*:*:*:*:*
autodesk autocad_mechanical 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_mechanical:2019:*:*:*:*:*:*:*
autodesk autocad_mep 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_mep:2019:*:*:*:*:*:*:*
autodesk autocad_plant_3d 2019
2020
2021
2022
2023
cpe:2.3:a:autodesk:autocad_plant_3d:2019:*:*:*:*:*:*:*
autodesk design_review 2018
cpe:2.3:a:autodesk:design_review:2018:-:*:*:*:*:*:*
Original advisory text
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lea...
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published21 Oct 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-42938 · NVD
Track software like this
Free during beta