CVE-2022-41310: Autodesk Autocad

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected products

• Autodesk Autocad: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Advance Steel: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Architecture: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Civil 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Electrical: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Lt: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Map 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Mechanical: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Mep: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Autocad Plant 3d: version 2019 only; version 2020 only; version 2021 only; version 2022 only; version 2023 only
• Autodesk Design Review: version 2018 only

Published 2022-10-21. Last modified 2026-06-17.