CVE-2022-25788

🗓️ 19 Apr 2022 20:26:31Reported by autodeskType

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-25788	19 Apr 202221:15	–	attackerkb
CNNVD	Autodesk AutoCAD 缓冲区错误漏洞	7 Mar 202200:00	–	cnnvd
Cvelist	CVE-2022-25788	19 Apr 202220:26	–	cvelist
EUVD	EUVD-2022-30428	3 Oct 202520:07	–	euvd
NVD	CVE-2022-25788	19 Apr 202221:15	–	nvd
Prion	Code injection	19 Apr 202221:15	–	prion
RedhatCVE	CVE-2022-25788	23 May 202500:08	–	redhatcve
Zero Day Initiative	Autodesk AutoCAD JT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability	7 Mar 202200:00	–	zdi
Zero Day Initiative	Autodesk AutoCAD JT File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability	11 Mar 202200:00	–	zdi

NVD

Node

autodesk advance_steelRange2022–2022.1.2

autodesk autocadRange2022–2022.1.2-

autodesk autocadRange2022–2022.2.2macos

autodesk autocad_architectureRange2022–2022.1.2

autodesk autocad_electricalRange2022–2022.1.2

autodesk autocad_ltRange2022–2022.1.2-

autodesk autocad_ltRange2022–2022.2.2macos

autodesk autocad_map_3dRange2022–2022.1.2

autodesk autocad_mechanicalRange2022–2022.1.2

autodesk autocad_mepRange2022–2022.1.2

autodesk autocad_plant_3dRange2022–2022.1.2

autodesk civil_3dRange2022–2022.1.2

autodesk inventorRange2022–2022.2

[
  {
    "product": "Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2022.1.1"
      }
    ]
  }
]

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002

21 Nov 2024 06:53Current

7.9High risk

Vulners AI Score7.9

CVSS 26.8

CVSS 3.17.8

EPSS0.00418

CWE-787