Memory corruption

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files...

Design/Logic Flaw

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-25794

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in...

CVE-2022-27528

A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-27528

Autodesk Navisworks 2022 is affected by a use-after-free vulnerability in the parsing of DWFX and SKP files, enabling potential code execution. The referenced advisories (ZDI for Navisworks Freedom/Manage, Red Hat and NVD variants) describe the fault as a parsing-time use-after-free in DWFX/SKP h...

CVE-2022-25796

The CVE-2022-25796 issue is a Double Free vulnerability in Autodesk Navisworks 2022 related to DWF file handling. It is triggered by processing crafted DWF inputs, leading to remote arbitrary code execution. Exploitation requires user interaction (e.g., opening a malicious file or visiting a mali...

CVE-2022-25792

A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code...

CVE-2022-25792

CVE-2022-25792 is a buffer overflow in DXF file parsing affecting Autodesk AutoCAD (2022, 2021, 2020, 2019) and Autodesk Navisworks 2022. The issue arises from writing beyond an allocated buffer when processing a malicious DXF file, allowing arbitrary code execution. Connected documents corrobora...

CVE-2022-25791

A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files...

CVE-2022-25791

The CVE-2022-25791 entry describes a memory corruption vulnerability in Autodesk products (AutoCAD 2022/2021/2020/2019 and Navisworks 2022) that can lead to code execution via maliciously crafted DWF/DWFX/DWF parsing. Connected sources specify the flaw arises from parsing of DWF/DWFX/DWF files an...

CVE-2022-25790

A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution...

CVE-2022-25790

CVE-2022-25790 describes a vulnerability in Autodesk products (Autodesk AutoCAD 2022/2021/2020/2019 and Autodesk Navisworks 2022) where parsing of DWF files can write beyond allocated boundaries, potentially enabling code execution. Connected sources (ZDI advisories) corroborate an out-of-bounds ...

CVE-2022-25789

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution...

CVE-2022-25789

Autodesk AutoCAD is affected by a use-after-free vulnerability triggered by parsing certain file formats (DWF, DWFX, 3DS) in several versions (2022, 2021, 2020, 2019). The issue stems from unsafe handling in the file-parsing code, allowing potential remote code execution. Several connected adviso...

PT-2022-17522 · Autodesk · Autodesk Fbx Review

Name of the Vulnerable Software and Affected Versions: Autodesk FBX Review versions 1.5.2 and prior Description: An Out-Of-Bounds Read issue may lead to code execution or information disclosure through maliciously crafted ActionScript Byte Code ABC files. These ABC files, created by the Flash...

CVE-2022-25794

An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in...

CVE-2022-25794

Autodesk FBX Review (versions 1.5.2 and earlier) is affected by an Out-of-Bounds Read vulnerability in the ABC file parsing path. The issue can allow reading beyond allocated memory when processing ActionScript Byte Code (ABC) files, potentially leading to information disclosure and, in conjuncti...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD, which could be exploited by an attacker to obtain sensitive information or cause a system crash by using a maliciously crafted DWG file ...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from a buffer over-read, which could be exploited by an attacker to obtain sensitive information or cause a system cra...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US company Autodesk. A buffer error vulnerability exists in Autodesk AutoCAD, which allows an attacker to remotely execute code from a maliciously crafted DWG file...