Out-of-Bounds Read Vulnerability in Autodesk AutoCAD Affecting Multiple Versions
CVE-2025-1652

7.8HIGH

Key Information:

Vendor
Autodesk
Status
Autocad
Autocad Architecture
Autocad Electrical
Autocad Mechanical
Vendor
CVE Published:
13 March 2025

Summary

A vulnerability exists in Autodesk AutoCAD where a specially crafted MODEL file can lead to an Out-of-Bounds Read when processed by the software. This flaw may allow an attacker to cause a crash, potentially expose sensitive data, or enable the execution of arbitrary code within the context of the running process. Users are advised to ensure they are utilizing the latest updates to mitigate potential exploitation of this vulnerability.

Affected Version(s)

Advance Steel 2025 < 2025.1.2

Advance Steel 2024 < 2024.1.7

Advance Steel 2023 < 2023.1.7

References

https://www.autodesk.com/trust/security-advisories/adsk-s...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.