Autodesk Subassembly Composer vulnerabilities

4 CVEs affecting Autodesk Subassembly Composer, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41308, published 2022-10-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-41307, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-41305, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction…
CVE-2022-41301, published 2022-10-03. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…
CVE-2022-41308, published 2022-10-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with…