Description
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D | 2022.1.1 | — |
Advisories 1
- ICSA-21-294-01 ICONICS GENESIS64 and Mitsubishi Electric MC Works64 CISA ICS & IT advisories · Oct 21, 2021