7.8High
CVE-2025-1276DWG File Parsing Out-of-Bounds Write Vulnerability
Description
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Weakness (CWE):
CWE-787
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Autodesk | Advance Steel | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD Architecture | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD Electrical | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD LT | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD MAP 3D | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD Mechanical | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD MEP | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| Autodesk | AutoCAD Plant 3D | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| autodesk | civil 3d | 2023 – < 2023.1.7 | |
| Autodesk | DWG TrueView | 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7 | |
| autodesk | infrastructure parts editor | 2024 – < 2024.1.7 | |
| autodesk | inventor | 2024 – < 2024.1.7 | |
| autodesk | navisworks manage | 2024 – < 2024.1.7 | |
| autodesk | navisworks simulate | 2024 – < 2024.1.7 | |
| Autodesk | RealDWG | 2025 – < 2025.1.2, 2024 – < 2024.1.7 | |
| autodesk | revit | 2024 – < 2024.1.7 | |
| autodesk | vault | 2024 – < 2024.1.7 |
References and patches
CPE matches (NVD) (45)
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*≥ 2023 < 2023.1.7cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2cpe:2.3:a:autodesk:vault:*:*:*:*:*:*:*:*≥ 2024 < 2024.1.7cpe:2.3:a:autodesk:vault:*:*:*:*:*:*:*:*≥ 2025 < 2025.1.2