ByteOS Network

CVE Vulnerability Details :

CVE-2022-33886

PUBLISHED

More Info Official Page

Assigner-autodesk

Assigner Org ID-7e40ea87-bc65-4944-9723-dd79dd760601

Published At-03 Oct, 2022 | 00:00

Updated At-03 Aug, 2024 | 08:09

▼CVE Numbering Authority (CNA)

A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. A malicious actor could leverage this vulnerability to execute arbitrary code.

Affected Products

Vendor

n/a

Product

Autodesk Maya

Versions

Affected

2023, 2022

Problem Types

Type	CWE ID	Description
text	N/A	Out-of-bound Write

References

Hyperlink	Resource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020	N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020	x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References