NetSight
IP …
high7.8

CVE-2022-25789

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability.

Impact

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Architecture
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Electrical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Lt
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Map 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mep
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskCivil 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2

Weakness classification

CWE-416

References