A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by attackers to execute arbitrary code.
Weakness
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Autocad | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_advance_steel | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_advance_steel | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_advance_steel | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_advance_steel | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_architecture | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_architecture | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_architecture | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_architecture | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_civil_3d | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_civil_3d | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_civil_3d | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_civil_3d | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_electrical | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_electrical | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_electrical | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_electrical | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_lt | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_lt | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_lt | Autodesk | 2020 (including) | 2020.3.2 (excluding) |
| Autocad_lt | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_lt | Autodesk | 2021 (including) | 2021.2.2 (excluding) |
| Autocad_lt | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_lt | Autodesk | 2022 (including) | 2022.2.2 (excluding) |
| Autocad_map_3d | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_map_3d | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_map_3d | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_map_3d | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_mechanical | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_mechanical | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_mechanical | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_mechanical | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_mep | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_mep | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_mep | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_mep | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Autocad_plant_3d | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Autocad_plant_3d | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Autocad_plant_3d | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Autocad_plant_3d | Autodesk | 2022 (including) | 2022.1.2 (excluding) |
| Design_review | Autodesk | 2018 (including) | 2018 (including) |
| Design_review | Autodesk | 2018-hotfix (including) | 2018-hotfix (including) |
| Design_review | Autodesk | 2018-hotfix2 (including) | 2018-hotfix2 (including) |
| Design_review | Autodesk | 2018-hotfix3 (including) | 2018-hotfix3 (including) |
| Dwg_trueview | Autodesk | 2019 (including) | 2019.1.4 (excluding) |
| Dwg_trueview | Autodesk | 2020 (including) | 2020.1.5 (excluding) |
| Dwg_trueview | Autodesk | 2021 (including) | 2021.1.2 (excluding) |
| Dwg_trueview | Autodesk | 2022 (including) | 2022.1.1 (excluding) |
| Fusion | Autodesk | 2.0.10356 (including) | 2.0.11405 (excluding) |
| Infrastructure_parts_editor | Autodesk | 2019 (including) | 2019.2.2 (excluding) |
| Infrastructure_parts_editor | Autodesk | 2020 (including) | 2020.0.2 (excluding) |
| Infrastructure_parts_editor | Autodesk | 2021 (including) | 2021 (including) |
| Infrastructure_parts_editor | Autodesk | 2022 (including) | 2022 (including) |
| Infraworks | Autodesk | 2019 (including) | 2019.3 (excluding) |
| Infraworks | Autodesk | 2020 (including) | 2020.2 (excluding) |
| Infraworks | Autodesk | 2021 (including) | 2021.2 (excluding) |
| Infraworks | Autodesk | 2019.3 (including) | 2019.3 (including) |
| Infraworks | Autodesk | 2019.3-hotfix_1 (including) | 2019.3-hotfix_1 (including) |
| Infraworks | Autodesk | 2019.3-hotfix_2 (including) | 2019.3-hotfix_2 (including) |
| Infraworks | Autodesk | 2019.3-hotfix_3 (including) | 2019.3-hotfix_3 (including) |
| Infraworks | Autodesk | 2020.2 (including) | 2020.2 (including) |
| Infraworks | Autodesk | 2020.2-hotfix_1 (including) | 2020.2-hotfix_1 (including) |
| Infraworks | Autodesk | 2020.2-hotfix_2 (including) | 2020.2-hotfix_2 (including) |
| Infraworks | Autodesk | 2021.2 (including) | 2021.2 (including) |
| Infraworks | Autodesk | 2021.2-hotfix_1 (including) | 2021.2-hotfix_1 (including) |
| Infraworks | Autodesk | 2021.2-hotfix_2 (including) | 2021.2-hotfix_2 (including) |
| Infraworks | Autodesk | 2022.0 (including) | 2022.0 (including) |
| Infraworks | Autodesk | 2022.0-hotfix_1 (including) | 2022.0-hotfix_1 (including) |
| Infraworks | Autodesk | 2022.1 (including) | 2022.1 (including) |
| Inventor | Autodesk | 2019 (including) | 2019.6 (excluding) |
| Inventor | Autodesk | 2020 (including) | 2020.5 (excluding) |
| Inventor | Autodesk | 2021 (including) | 2021.4 (excluding) |
| Inventor | Autodesk | 2022 (including) | 2022.2 (excluding) |
| Navisworks | Autodesk | 2019 (including) | 2019.7 (excluding) |
| Navisworks | Autodesk | 2020 (including) | 2020.5 (excluding) |
| Navisworks | Autodesk | 2021 (including) | 2021.4 (excluding) |
| Navisworks | Autodesk | 2022 (including) | 2022.2 (excluding) |
| Revit | Autodesk | 2019 (including) | 2019.2.4 (excluding) |
| Revit | Autodesk | 2020 (including) | 2020.2.6 (excluding) |
| Revit | Autodesk | 2021 (including) | 2021.1.5 (excluding) |
| Revit | Autodesk | 2022 (including) | 2022 (including) |
| Storm_and_sanitary_analysis | Autodesk | 2020 (including) | 2020.3.1 (excluding) |
| Storm_and_sanitary_analysis | Autodesk | 2021 (including) | 2021.3.1 (excluding) |
| Storm_and_sanitary_analysis | Autodesk | 2019 (including) | 2019 (including) |
| Storm_and_sanitary_analysis | Autodesk | 2022 (including) | 2022 (including) |