VYPR
High severity7.8NVD Advisory· Published Apr 19, 2022· Updated Jun 17, 2026

CVE-2022-25788

CVE-2022-25788

Description

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.

Affected products

14
  • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • Autodesk/Autocad5 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*+ 4 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:*range: >=2022,<2022.1.2
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*range: >=2022,<2022.2.2
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:*range: >=2022,<2022.1.2
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:*range: >=2022,<2022.2.2
    • (no CPE)
  • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.1.2
  • cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:*
    Range: >=2022,<2022.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.