VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026

CVE-2022-25791

CVE-2022-25791

Description

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.

Affected products

14
  • Autodesk/Advance Steel
    cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad4 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*range: >=2022,<2022.2.2
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • (no CPE)range: 2022, 2021, 2020, 2019
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Civil 3d
    cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Navisworks2 versions
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*range: >=2022,<2022.2
    • (no CPE)range: 2022

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.