Uninitialized Variable Vulnerability in Autodesk AutoCAD

CVE-2025-1649

Summary

A vulnerability exists in Autodesk AutoCAD due to improper handling of files, specifically a maliciously crafted CATPRODUCT file. This can lead to an uninitialized variable situation that may be exploited by an attacker, resulting in the potential for application crashes, unauthorized reading of sensitive information, or even the execution of arbitrary code within the current operating process. Organizations using affected versions of AutoCAD should upgrade to the latest versions to mitigate these risks.

References