7.8Yüksek

CVE-2025-1275JPG File Parsing Heap-Based Overflow Vulnerability

Autodesk Revit; Autodesk AutoCAD; Autodesk AutoCAD Architecture; Autodesk AutoCAD Electrical Yayım: (1 yıl önce)

Açıklama

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Zayıflık türü (CWE): CWE-122CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Autodesk Advance Steel 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD Architecture 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD Electrical 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD LT 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD MAP 3D 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD Mechanical 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD MEP 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk AutoCAD Plant 3D 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk Civil 3D 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk DWG TrueView 2025 – < 2025.1.2, 2024 – < 2024.1.7, 2023 – < 2023.1.7
Autodesk Revit 2025 – < 2025.4.1, 2024 – < 2024.3.2, 2023 – < 2023.1.7

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (36)

  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* ≥ 2024 < 2024.3.2
  • cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* ≥ 2025 < 2025.4.1
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2023 < 2023.1.7
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2024 < 2024.1.7
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* ≥ 2025 < 2025.1.2