ZeroHour

CVE-2025-1652

CVSS 3.1
7.8 high
EPSS
<1%p14
Published
()
Modified
Description

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Vendors
autodesk
Products
autocad, advance steel, civil 3d, autocad mechanical, autocad mep, autocad plant 3d, autocad map 3d, autocad architecture, autocad electrical
Weakness
CWE-125
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.