NetSight
high7.8

CVE-2022-25788

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files.

Impact

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2022 before 2022.1.2
AutodeskAutocad
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Architecture
from 2022 before 2022.1.2
AutodeskAutocad Electrical
from 2022 before 2022.1.2
AutodeskAutocad Lt
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Map 3d
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
from 2022 before 2022.1.2
AutodeskAutocad Mep
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
from 2022 before 2022.1.2
AutodeskCivil 3d
from 2022 before 2022.1.2
AutodeskInventor
from 2022 before 2022.2

Weakness classification

References