CVE-2022-41308: Autodesk Subassembly Composer

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected products

• Autodesk Subassembly Composer: version 2020 only; version 2021 only; version 2022 only; version 2023 only

Published 2022-10-14. Last modified 2026-06-17.