Description
A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Metrics
CVSS 3.1 7.8/10
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Autodesk | AutoCAD | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD LT | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD Architecture | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD Electrical | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD MAP 3D | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD Mechanical | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD MEP | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | AutoCAD Plant 3D | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | Civil 3D | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | Advance Steel | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6 |
| Autodesk | DWG TrueView | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7 |
| Autodesk | RealDWG | >= 2025, < 2025.1.1; >= 2024, < 2024.1.7 |
References
Timeline
- Published
- Oct 29, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Modified