maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Configuration 7 (hide)
|
Configuration 8 (hide)
|
Configuration 9 (hide)
|
Configuration 10 (hide)
|
Configuration 11 (hide)
|
Configuration 12 (hide)
|
19 Aug 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References |
|
08 May 2025, 15:44
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CPE | cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* |
|
| First Time |
Autodesk autocad Map 3d
Autodesk revit Autodesk Autodesk autocad Plant 3d Autodesk autocad Electrical Autodesk autocad Architecture Autodesk autocad Mep Autodesk dwg Trueview Autodesk civil 3d Autodesk autocad Autodesk autocad Mechanical Autodesk advance Steel Autodesk autocad Lt |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0006 - Vendor Advisory |
16 Apr 2025, 13:25
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Published : 2025-04-15 21:15
Updated : 2025-08-19 13:15
NVD link : CVE-2025-1275
Mitre link : CVE-2025-1275
CVE.ORG link : CVE-2025-1275
JSON object : View