CVE-2022-25789

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

1.54%

Published

Apr 11, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-416

Affected Products (41)

autodesk · advance_steel (up to 2019.1.4)vulnerable

autodesk · advance_steel (up to 2020.1.5)vulnerable

autodesk · advance_steel (up to 2021.1.2)vulnerable

autodesk · advance_steel (up to 2022.1.2)vulnerable

autodesk · autocad (up to 2019.1.4)vulnerable

autodesk · autocad (up to 2020.1.5)vulnerable

autodesk · autocad (up to 2021.1.2)vulnerable

autodesk · autocad (up to 2022.1.2)vulnerable

autodesk · autocad (up to 2022.2.2)vulnerable

autodesk · autocad_architecture (up to 2019.1.4)vulnerable

autodesk · autocad_architecture (up to 2020.1.5)vulnerable

autodesk · autocad_architecture (up to 2021.1.2)vulnerable

autodesk · autocad_architecture (up to 2022.1.2)vulnerable

autodesk · autocad_electrical (up to 2019.1.4)vulnerable

autodesk · autocad_electrical (up to 2020.1.5)vulnerable

autodesk · autocad_electrical (up to 2021.1.2)vulnerable

autodesk · autocad_electrical (up to 2022.1.2)vulnerable

autodesk · autocad_lt (up to 2019.1.4)vulnerable

autodesk · autocad_lt (up to 2020.1.5)vulnerable

autodesk · autocad_lt (up to 2021.1.2)vulnerable

autodesk · autocad_lt (up to 2022.1.2)vulnerable

autodesk · autocad_map_3d (up to 2019.1.4)vulnerable

autodesk · autocad_map_3d (up to 2020.1.5)vulnerable

autodesk · autocad_map_3d (up to 2021.1.2)vulnerable

autodesk · autocad_map_3d (up to 2022.1.2)vulnerable

autodesk · autocad_mechanical (up to 2019.1.4)vulnerable

autodesk · autocad_mechanical (up to 2020.1.5)vulnerable

autodesk · autocad_mechanical (up to 2021.1.2)vulnerable

autodesk · autocad_mechanical (up to 2022.1.2)vulnerable

autodesk · autocad_mep (up to 2019.1.4)vulnerable

autodesk · autocad_mep (up to 2020.1.5)vulnerable

autodesk · autocad_mep (up to 2021.1.2)vulnerable

autodesk · autocad_mep (up to 2022.1.2)vulnerable

autodesk · autocad_plant_3d (up to 2019.1.4)vulnerable

autodesk · autocad_plant_3d (up to 2020.1.5)vulnerable

autodesk · autocad_plant_3d (up to 2021.1.2)vulnerable

autodesk · autocad_plant_3d (up to 2022.1.2)vulnerable

autodesk · civil_3d (up to 2019.1.4)vulnerable

autodesk · civil_3d (up to 2020.1.5)vulnerable

autodesk · civil_3d (up to 2021.1.2)vulnerable

autodesk · civil_3d (up to 2022.1.2)vulnerable

References (2)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005

Vendor Advisory

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs