An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · autodeskNVD modified 2026-10-08 21:17
Affected (CPE criteria) 14
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*cpe:2.3:a:autodesk:inventor:2019:*:*:*:*:*:*:*cpe:2.3:a:autodesk:inventor:2020:*:*:*:*:*:*:*cpe:2.3:a:autodesk:inventor:2021:*:*:*:*:*:*:*cpe:2.3:a:autodesk:inventor:2022:*:*:*:*:*:*:*
References 6
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-282/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-22-289/ Third Party Advisory, VDB Entry
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
- https://www.zerodayinitiative.com/advisories/ZDI-22-282/ Third Party Advisory, VDB Entry
- https://www.zerodayinitiative.com/advisories/ZDI-22-289/ Third Party Advisory, VDB Entry