Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:design_review:2018:hotfix3:*:*:*:*:*:*

part: a version: 2018 update: hotfix3

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductDesign Review (9e29e191-9769-58b5-aa48-9b85eb891496)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-33890 vulnerable 2026-06-08 05:44:51.331784 Details available
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-10-03T00:00:00.000Z
Updated: 2024-08-03T08:09:22.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33889 vulnerable 2026-06-08 05:44:51.327881 Details available
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
Published: 2022-10-03T14:22:14.000Z
Updated: 2024-08-03T08:09:22.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27866 vulnerable 2026-06-08 05:42:43.456425 Details available
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-07-29T19:01:44.000Z
Updated: 2024-08-03T05:41:10.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27865 vulnerable 2026-06-08 05:42:43.455485 Details available
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-07-29T19:01:34.000Z
Updated: 2024-08-03T05:41:10.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27864 vulnerable 2026-06-08 05:42:43.453239 Details available
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Published: 2022-07-29T19:05:31.000Z
Updated: 2024-08-03T05:41:10.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27526 vulnerable 2026-06-08 05:41:55.425932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27525 vulnerable 2026-06-08 05:41:55.423974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40166 vulnerable 2026-06-08 05:35:17.255117 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40165 vulnerable 2026-06-08 05:35:17.252256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40164 vulnerable 2026-06-08 05:35:17.249229 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40163 vulnerable 2026-06-08 05:35:17.243800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40162 vulnerable 2026-06-08 05:35:17.223129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40161 vulnerable 2026-06-08 05:35:17.217107 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40160 vulnerable 2026-06-08 05:35:17.208049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27041 vulnerable 2026-06-08 05:30:45.795820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27036 vulnerable 2026-06-08 05:30:45.778332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27035 vulnerable 2026-06-08 05:30:45.777649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.