CVE-2025-2497

CVE-2025-2497 relates to Autodesk Revit parsing a malicious DWG file, causing a Stack-Based Buffer Overflow and enabling arbitrary code execution in the context of the current process. Affected product: Autodesk Revit (DWG parsing functionality). Root cause: stack-based overflow triggered during ...

CVE-2025-1276

CVE-2025-1276 : A maliciously crafted DWG file, when parsed by Autodesk applications, can trigger an Out-of-Bounds Write vulnerability. Impacted behavior includes a crash, data corruption, or arbitrary code execution in the context of the affected process. The root cause is an out-of-bounds write...

CVE-2025-1276 DWG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-1276 DWG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-1275 JPG File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1275 JPG File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1275

The CVE-2025-1275 entry concerns a heap-based overflow in JPG parsing when linked or imported into Autodesk applications. The vulnerability affects Autodesk products using JPG handling in affected workflows (e.g., AutoCAD/Revit-related components) and can allow a malicious actor to crash the appl...

PT-2025-16476

Name of the Vulnerable Software and Affected Versions Autodesk applications affected versions not specified Description A specially crafted PDF file, when linked or imported into Autodesk applications, can lead to a Heap-Based Overflow. An attacker can exploit this to cause a crash, potentially...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US company Autodesk. A security vulnerability exists in Autodesk AutoCAD that originates from a malicious DWG file resulting in an out-of-bounds write that could lead to the execution of arbitrary code...

PT-2025-16477 · Autodesk · Autodesk Revit

Name of the Vulnerable Software and Affected Versions: Autodesk Revit affected versions not specified Description: A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write issue. This can be leveraged by a malicious actor to cause a crash, data...

PT-2025-16480 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk applications affected versions not specified Description: A maliciously crafted PDF file can cause a Memory Corruption issue when parsed through Autodesk applications, allowing a malicious actor to execute arbitrary code in the conte...

PT-2025-16478 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk applications affected versions not specified Description: A maliciously crafted JPG file can cause a Heap-Based Overflow when linked or imported into certain applications, potentially allowing a malicious actor to crash the...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that stems from a malicious DWG file causing a stack buffer overflow that could lead to the execution of arbitrary code...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that originates from a malicious PDF file that causes a heap overflow, which could lead to the execution of arbitrary code...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that originates from an out-of-bounds write due to a malicious RCS file, which could lead to the execution of arbitrary code...

PT-2025-16479 · Autodesk · Autodesk

Name of the Vulnerable Software and Affected Versions: Autodesk applications affected versions not specified Description: A maliciously crafted DWG file can cause an Out-of-Bounds Write issue when parsed through certain Autodesk applications. This can be leveraged by a malicious actor to cause a...

Autodesk Revit 缓冲区错误漏洞

Autodesk Revit is a suite of building information modeling software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Revit that originates from a malicious PDF file that causes memory corruption, which could lead to the execution of arbitrary code...

Autodesk AutoCAD和Autodesk Revit 缓冲区错误漏洞

Autodesk AutoCAD and Autodesk Revit are both products of Autodesk, Inc. of the U.S.A. Autodesk AutoCAD is a suite of professional 3D drawing software.Autodesk Revit is a suite of building information modeling software. A security vulnerability exists in Autodesk AutoCAD and Autodesk Revit that...

PT-2025-31233 · Autodesk · Autodesk Products

Name of the Vulnerable Software and Affected Versions: Autodesk products affected versions not specified Description: A maliciously crafted X T file, when parsed by certain Autodesk products, can lead to a memory corruption issue. A malicious actor could potentially exploit this to execute...

Autodesk Navisworks Simulate 25.0.x < 2025.5 Multiple Vulnerabilities (adsk-sa-2025-0002)

The version of Autodesk Navisworks Simulate installed on the remote host is 2025.0 prior to 2025.5. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2025-0002 advisory. - A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an...