CVE-2022-27523: Autodesk Dwg Trueview

High severity, CVSS 7.1. EPSS: 1.4% chance of exploitation in the next 30 days.

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected products

• Autodesk Dwg Trueview: from 2019, before 2019.1.4 (fixed in 2019.1.4); from 2020, before 2020.1.5 (fixed in 2020.1.5); from 2021, before 2021.1.2 (fixed in 2021.1.2); from 2022, before 2022.1.2 (fixed in 2022.1.2)

Published 2022-04-13. Last modified 2026-06-17.