CVE-2022-25797

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@autodesk.com

Published

2022-04-13

Last modified

2024-08-03

Weaknesses

CWE-787

Affected products

• Dwg Trueview (Autodesk)

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007