PT-2022-18472 · Autodesk · Autodesk 3Ds Max

Published 2022-05-10 · Updated 2022-06-27 · CVE-2022-27532

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max versions 2021 through 2022

Description A maliciously crafted TIF file can be used to write beyond the allocated buffer while parsing TIF files. This issue, in conjunction with other vulnerabilities, could lead to arbitrary code execution.

Recommendations For versions 2021 and 2022, update to a version that includes a fix for the TIF file parsing issue to prevent arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-27532

ZDI-22-719

ZDI-22-720

ZDI-22-721

Affected Products

Autodesk 3Ds Max

References · 8

• https://zerodayinitiative.com/advisories/ZDI-22-721 · Security Note
• https://autodesk.com/trust/security-advisories/adsk-sa-2022-0010 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-27532 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-720 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-22-719 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-27532 · Security Note
• https://t.me/cvenotify/31729 · Telegram Post
• https://t.me/cibsecurity/44640 · Telegram Post