CVE-2022-41307 - A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation · CoreCVE

Back Back to CVE browser

HIGH

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation

Published Oct 14, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.55%

Description

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected products

Vendor n/a Product Subassembly Composer Default
n/a
- Version
  2023, 2022, 2021, 2021
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Subassembly Composer

n/a

Version	Status	Constraints
2023, 2022, 2021, 2021	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (1)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020
PatchVendor Advisory

Link	Providers	Tags
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0020		PatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner autodesk

Published Oct 14, 2022

Updated May 14, 2025

Reserved Sep 21, 2022

Link CVE-2022-41307

CISA Vulnrichment

Updated May 14, 2025

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41307

Severity n/a

Public date n/a

Links CVE-2022-41307