A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.8 · autodeskNVD modified 2026-10-08 21:17
Affected (CPE criteria) 4
cpe:2.3:a:autodesk:autocad:2019:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad:2020:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*