PT-2022-17520

CVE-2022-25792

·

Published

2022-03-07

·

Updated

2022-04-19

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Autodesk Navisworks versions 2020 through 2022
Description A maliciously crafted file can be used to write beyond the allocated buffer, potentially allowing for the execution of arbitrary code through a buffer overflow issue.
Recommendations For Autodesk AutoCAD versions 2019 through 2022, update to a version that includes a fix for the buffer overflow vulnerability. For Autodesk Navisworks versions 2020 through 2022, update to a version that includes a fix for the buffer overflow vulnerability. As a temporary workaround, consider restricting the use of potentially vulnerable file parsing functions until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ZDI-22-460
ZDI-22-476
ZDI-22-554
ZDI-22-565
ZDI-22-567
Found an issue in the description? Have something to add? Feel free to write us 👾