CVE-2022-27871: Autodesk 3ds Max

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

Affected products

• Autodesk 3ds Max: version 2021 only; version 2022 only
• Autodesk Advance Steel: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Architecture: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Civil 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Electrical: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Lt: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Map 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Mechanical: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Mep: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Autocad Plant 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only
• Autodesk Design Review: version 2018 only
• Autodesk Navisworks: version 2019 only; version 2020 only; version 2022 only
• Autodesk Revit: version 2020 only; version 2021 only; version 2022 only

Published 2022-06-21. Last modified 2026-06-17.