CVE-2022-27871

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD product suite versions prior to 9.1.17 Revit versions prior to 9.1.17 Design Review versions prior to 9.1.17 Navisworks releases versions prior to 9.1.17

Description The issue is related to the PDFTron component in Autodesk software, which can be exploited to execute arbitrary code when parsing PDF files. This is due to a buffer overflow vulnerability, allowing writing beyond the allocated buffer. The vulnerability can be exploited by a remote attacker.

Recommendations For Autodesk AutoCAD product suite versions prior to 9.1.17, update to version 9.1.17 or later. For Revit versions prior to 9.1.17, update to version 9.1.17 or later. For Design Review versions prior to 9.1.17, update to version 9.1.17 or later. For Navisworks releases versions prior to 9.1.17, update to version 9.1.17 or later. As a temporary workaround, consider restricting the use of the PDFTron component until a patch is available. Avoid using the PDFTron component to parse PDF files until the issue is resolved.