Exploiting an information disclosure vulnerability may lead to information about the affected system being disclosed. An attacker may leverage this information to further exploit other vulnerabilities on the same system, or target other systems. Autodesk is aware of a public report of this issue that was posted to a 3D printing website, and we are working with the vendor to resolve this issue. Exploitation of an out-of-bounds write vulnerability may lead to information disclosure. An attacker may leverage this information to further exploit other vulnerabilities on the same system, or target other systems. Autodesk is aware of a public report of this issue that was posted to a 3D printing website, and we are working with the vendor to resolve this issue. Exploitation of an out-of-bounds write vulnerability may lead to remote code execution. An attacker may leverage this information to further exploit other vulnerabilities on the same system, or target other systems. Autodesk is aware of a public report of this issue that was posted to a 3D printing website, and we are working with the vendor to resolve this issue. Public reports of these issues have been received and are being investigated.

Details of the Vulnerabilities

CVE-2022-41304 - Exploiting an out-of-bounds write vulnerability may lead to information disclosure
CVE-2022-41305 - Exploiting an out-of-bounds write vulnerability may lead to remote code execution

Information Disclosure Vulnerability

Exploiting an out-of-bounds write vulnerability could lead to information disclosure. The vulnerability may be used to leak information about the affected system, and then leverage that information to further exploit other vulnerabilities on the same system or target other systems. Autodesk is aware of a public report of this issue that was posted to a 3D printing website, and we are working with the vendor to resolve this issue.
Information disclosure vulnerability: CVE-2022-41304

Timeline

Published on: 10/14/2022 17:15:00 UTC
Last modified on: 10/19/2022 06:20:00 UTC

References