Uninitialized Variable Vulnerability in Autodesk AutoCAD

CVE-2025-1427

What is CVE-2025-1427?

A vulnerability exists in Autodesk AutoCAD that can be exploited through a specially crafted CATPRODUCT file. When processed, this file can lead to uninitialized variables, enabling a threat actor to cause unexpected crashes, access sensitive information, or execute arbitrary code within the affected application’s context. Users should take precautions and apply appropriate patches as recommended by Autodesk.

References