Description
A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Problem types
CWE-122 Heap-Based Buffer Overflow
Product status
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
2025 (custom) before 2025.1.2
2024 (custom) before 2024.1.7
2023 (custom) before 2023.1.7
2022 (custom) before 2022.1.6
References
www.autodesk.com/products/autodesk-access/overview
www.autodesk.com/...t-update-of-AutoCAD-AutoCAD-LT-2022.html
www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001