CVE-2022-27867
HighCVSS 7.8Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can trigger a use-after-free vulnerability. Exploitation may lead to code execution.
Risk Assessment
Opening a malicious JT file may allow an attacker to execute arbitrary code in the user's context. This poses a high risk for organizations using AutoCAD.
Recommendation
Update Autodesk AutoCAD to the latest version containing the fix. Avoid opening JT files from untrusted sources.
Other vulnerabilities in Autodesk AutoCAD
See all- CVE-2026-17550Medium
An Out-of-Bounds Read vulnerability in Autodesk AutoCAD when parsing a maliciously crafted DWG or DXF file can cause a crash or disclose sensitive information.
- CVE-2026-16465Medium
An Out-of-Bounds Read vulnerability in Autodesk AutoCAD when parsing a maliciously crafted DWG or DXF file can cause a crash or disclose sensitive information.
- CVE-2026-16463High
A Heap-Based Overflow vulnerability in Autodesk AutoCAD occurs when parsing a maliciously crafted DXF file. An attacker can exploit this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
- CVE-2023-41139High
A specially crafted STP file parsed through Autodesk AutoCAD 2024 and 2023 can cause an untrusted pointer dereference. This vulnerability, along with others, could lead to code execution in the current process.
- CVE-2022-25788High
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.
Original NVD description (English source)
A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS