Description
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Reserved 2025-02-13 | Published 2025-04-15 | Updated 2025-04-25 | Assigner
autodeskHIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Problem types
CWE-122 Heap-Based Buffer Overflow
Product status
Default status
unaffected
2025 before 2025.4.1
affected
2024 before 2024.3.2
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.2
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
References
www.autodesk.com/trust/security-advisories/adsk-sa-2025-0006
cve.org (CVE-2025-1275)
nvd.nist.gov (CVE-2025-1275)
Download JSON
