NetSight
IP …
high7.8

CVE-2022-25791

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution thr…

Impact

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.

Affected products

VendorProductAffected versions
AutodeskAdvance Steel
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
from 2022 before 2022.2.2
AutodeskAutocad Architecture
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Electrical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Lt
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Map 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mechanical
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Mep
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskAutocad Plant 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskCivil 3d
from 2019 before 2019.1.4
from 2020 before 2020.1.5
from 2021 before 2021.1.2
from 2022 before 2022.1.2
AutodeskNavisworks
from 2022 before 2022.2

Weakness classification

CWE-787

References