Approved changes feed: RSS · Atom

cpe:2.3:a:autodesk:design_review:2018:hotfix5:*:*:*:*:*:*

part: a version: 2018 update: hotfix5

VendorAutodesk (63e0b459-a294-5304-99c8-fcb7d9c8113e)
ProductDesign Review (9e29e191-9769-58b5-aa48-9b85eb891496)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-33890 vulnerable 2026-06-08 05:44:51.331818 Details available
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-10-03T00:00:00.000Z
Updated: 2024-08-03T08:09:22.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33889 vulnerable 2026-06-08 05:44:51.329179 Details available
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
Published: 2022-10-03T14:22:14.000Z
Updated: 2024-08-03T08:09:22.694Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27866 vulnerable 2026-06-08 05:42:43.456460 Details available
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Published: 2022-07-29T19:01:44.000Z
Updated: 2024-08-03T05:41:10.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27865 vulnerable 2026-06-08 05:42:43.455603 Details available
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
Published: 2022-07-29T19:01:34.000Z
Updated: 2024-08-03T05:41:10.400Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27864 vulnerable 2026-06-08 05:42:43.454717 Details available
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
Published: 2022-07-29T19:05:31.000Z
Updated: 2024-08-03T05:41:10.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.