PT-2022-17518

CVE-2022-25790

·

Published

2022-03-07

·

Updated

2022-04-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Autodesk Navisworks versions 2022
Description The issue arises from a maliciously crafted DWF file that can be used to write beyond the allocated boundaries when parsing the DWF files, potentially leading to code execution.
Recommendations For Autodesk AutoCAD versions 2019 through 2022, update to a version that includes the fix for this issue. For Autodesk Navisworks version 2022, update to a version that includes the fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-22-463
ZDI-22-475
ZDI-22-553
ZDI-22-559
ZDI-22-560
ZDI-22-562
ZDI-22-563
ZDI-22-569
ZDI-22-570
Found an issue in the description? Have something to add? Feel free to write us 👾