VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026

CVE-2022-25792

CVE-2022-25792

Description

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.

Affected products

14
  • Autodesk/Advance Steel
    cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad4 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:*range: >=2022,<2022.2.2
    • cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*range: >=2019,<2019.1.4
    • (no CPE)range: 2022, 2021, 2020, 2019
  • Autodesk/Autocad Architecture
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Electrical
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Map 3d
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mechanical
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Mep
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Autocad Plant 3d
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Civil 3d
    cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
    Range: >=2019,<2019.1.4
  • Autodesk/Navisworks2 versions
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*range: >=2022,<2022.2
    • (no CPE)range: 2022

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.