CVE-2022-27865: Autodesk Design Review

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.

Affected products

• Autodesk Design Review: version 2011 only; version 2012 only; version 2013 only; version 2017 only; version 2018 only

Published 2022-07-29. Last modified 2026-06-17.