7.8Hoch

CVE-2025-8894PDF File Parsing Heap-Based Buffer Overflow Vulnerability

Autodesk Revit; Autodesk Revit LT; Autodesk AutoCAD; Autodesk AutoCAD Architecture Veröffentlicht: (vor 1 Jahr)

Beschreibung

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Schwachstellentyp (CWE): CWE-122

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Autodesk Advance Steel 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD Architecture 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD Electrical 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD LT 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD MAP 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD Mechanical 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD MEP 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk AutoCAD Plant 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk Civil 3D 2026 – < 2026.1, 2025 – < 2025.1.3, 2024 – < 2024.1.8, 2023 – < 2023.1.8
Autodesk Revit 2026 – < 2026.3, 2025 – < 2025.4.3, 2024 – < 2024.3.4
Autodesk Revit LT 2026 – < 2026.3, 2025 – < 2025.4.3, 2024 – < 2024.3.4

Referenzen und Patches

CPE-Treffer (NVD) (32)

  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* ≥ 2025 < 2025.4.3
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* ≥ 2026 < 2026.3
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.8
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.3
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2026 < 2026.1