← Back

CVE-2022-25789

nvd nist
Published: Apr 11, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

Affected (41)

Autodesk
10 products
Advance Steel
Autocad
Autocad Architecture
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Civil 3d
Configuration A
41 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Advance Steel
2019 ≤ version < 2019.1.4
Advance Steel
2020 ≤ version < 2020.1.5
Advance Steel
2021 ≤ version < 2021.1.2
Advance Steel
2022 ≤ version < 2022.1.2
Autodesk
Autocad
2019 ≤ version < 2019.1.4
Autocad
2020 ≤ version < 2020.1.5
Autocad
2021 ≤ version < 2021.1.2
Autocad
2022 ≤ version < 2022.1.2
Autocad
2022 ≤ version < 2022.2.2
Autodesk
Autocad Architecture
2019 ≤ version < 2019.1.4
Autocad Architecture
2020 ≤ version < 2020.1.5
Autocad Architecture
2021 ≤ version < 2021.1.2
Autocad Architecture
2022 ≤ version < 2022.1.2
Autodesk
Autocad Electrical
2019 ≤ version < 2019.1.4
Autocad Electrical
2020 ≤ version < 2020.1.5
Autocad Electrical
2021 ≤ version < 2021.1.2
Autocad Electrical
2022 ≤ version < 2022.1.2
Autodesk
Autocad Lt
2019 ≤ version < 2019.1.4
Autocad Lt
2020 ≤ version < 2020.1.5
Autocad Lt
2021 ≤ version < 2021.1.2
Autocad Lt
2022 ≤ version < 2022.1.2
Autodesk
Autocad Map 3d
2019 ≤ version < 2019.1.4
Autocad Map 3d
2020 ≤ version < 2020.1.5
Autocad Map 3d
2021 ≤ version < 2021.1.2
Autocad Map 3d
2022 ≤ version < 2022.1.2
Autodesk
Autocad Mechanical
2019 ≤ version < 2019.1.4
Autocad Mechanical
2020 ≤ version < 2020.1.5
Autocad Mechanical
2021 ≤ version < 2021.1.2
Autocad Mechanical
2022 ≤ version < 2022.1.2
Autodesk
Autocad Mep
2019 ≤ version < 2019.1.4
Autocad Mep
2020 ≤ version < 2020.1.5
Autocad Mep
2021 ≤ version < 2021.1.2
Autocad Mep
2022 ≤ version < 2022.1.2
Autodesk
Autocad Plant 3d
2019 ≤ version < 2019.1.4
Autocad Plant 3d
2020 ≤ version < 2020.1.5
Autocad Plant 3d
2021 ≤ version < 2021.1.2
Autocad Plant 3d
2022 ≤ version < 2022.1.2
Autodesk
Civil 3d
2019 ≤ version < 2019.1.4
Civil 3d
2020 ≤ version < 2020.1.5
Civil 3d
2021 ≤ version < 2021.1.2
Civil 3d
2022 ≤ version < 2022.1.2

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.