Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:design_review:2018:hotfix4:*:*:*:*:*:*

part: a version: 2018 update: hotfix4

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductDesign Review (9e29e191-9769-58b5-aa48-9b85eb891496)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-33890 vulnerable 2026-06-08 05:44:51.331801 Details available
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-10-03T00:00:00.000Z
Updated: 2024-08-03T08:09:22.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33889 vulnerable 2026-06-08 05:44:51.328543 Details available
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
Published: 2022-10-03T14:22:14.000Z
Updated: 2024-08-03T08:09:22.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27866 vulnerable 2026-06-08 05:42:43.456441 Details available
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-07-29T19:01:44.000Z
Updated: 2024-08-03T05:41:10.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27865 vulnerable 2026-06-08 05:42:43.455584 Details available
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-07-29T19:01:34.000Z
Updated: 2024-08-03T05:41:10.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27864 vulnerable 2026-06-08 05:42:43.453853 Details available
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Published: 2022-07-29T19:05:31.000Z
Updated: 2024-08-03T05:41:10.210Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27526 vulnerable 2026-06-08 05:41:55.425949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27525 vulnerable 2026-06-08 05:41:55.424478 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40161 vulnerable 2026-06-08 05:35:17.217125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40160 vulnerable 2026-06-08 05:35:17.208666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-27041 vulnerable 2026-06-08 05:30:45.797880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.