A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
2025-04-15T21:15:47.320
2025-08-19T13:15:39.800
Modified
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | autodesk | advance_steel | < 2023.1.7 | Yes |
| Application | autodesk | advance_steel | < 2024.1.7 | Yes |
| Application | autodesk | advance_steel | < 2025.1.2 | Yes |
| Application | autodesk | autocad | < 2023.1.7 | Yes |
| Application | autodesk | autocad | < 2024.1.7 | Yes |
| Application | autodesk | autocad | < 2025.1.2 | Yes |
| Application | autodesk | autocad_architecture | < 2023.1.7 | Yes |
| Application | autodesk | autocad_architecture | < 2024.1.7 | Yes |
| Application | autodesk | autocad_architecture | < 2025.1.2 | Yes |
| Application | autodesk | autocad_electrical | < 2023.1.7 | Yes |
| Application | autodesk | autocad_electrical | < 2024.1.7 | Yes |
| Application | autodesk | autocad_electrical | < 2025.1.2 | Yes |
| Application | autodesk | autocad_lt | < 2023.1.7 | Yes |
| Application | autodesk | autocad_lt | < 2024.1.7 | Yes |
| Application | autodesk | autocad_lt | < 2025.1.2 | Yes |
| Application | autodesk | autocad_map_3d | < 2023.1.7 | Yes |
| Application | autodesk | autocad_map_3d | < 2024.1.7 | Yes |
| Application | autodesk | autocad_map_3d | < 2025.1.2 | Yes |
| Application | autodesk | autocad_mechanical | < 2023.1.7 | Yes |
| Application | autodesk | autocad_mechanical | < 2024.1.7 | Yes |
| Application | autodesk | autocad_mechanical | < 2025.1.2 | Yes |
| Application | autodesk | autocad_mep | < 2023.1.7 | Yes |
| Application | autodesk | autocad_mep | < 2024.1.7 | Yes |
| Application | autodesk | autocad_mep | < 2025.1.2 | Yes |
| Application | autodesk | autocad_plant_3d | < 2023.1.7 | Yes |
| Application | autodesk | autocad_plant_3d | < 2024.1.7 | Yes |
| Application | autodesk | autocad_plant_3d | < 2025.1.2 | Yes |
| Application | autodesk | civil_3d | < 2023.1.7 | Yes |
| Application | autodesk | civil_3d | < 2024.1.7 | Yes |
| Application | autodesk | civil_3d | < 2025.1.2 | Yes |
| Application | autodesk | dwg_trueview | < 2023.1.7 | Yes |
| Application | autodesk | dwg_trueview | < 2024.1.7 | Yes |
| Application | autodesk | dwg_trueview | < 2025.1.2 | Yes |
| Application | autodesk | infrastructure_parts_editor | < 2024.1.7 | Yes |
| Application | autodesk | infrastructure_parts_editor | < 2025.1.2 | Yes |
| Application | autodesk | inventor | < 2024.1.7 | Yes |
| Application | autodesk | inventor | < 2025.1.2 | Yes |
| Application | autodesk | navisworks_manage | < 2024.1.7 | Yes |
| Application | autodesk | navisworks_manage | < 2025.1.2 | Yes |
| Application | autodesk | navisworks_simulate | < 2024.1.7 | Yes |
| Application | autodesk | navisworks_simulate | < 2025.1.2 | Yes |
| Application | autodesk | revit | < 2024.1.7 | Yes |
| Application | autodesk | revit | < 2025.1.2 | Yes |
| Application | autodesk | vault | < 2024.1.7 | Yes |
| Application | autodesk | vault | < 2025.1.2 | Yes |