Skip to content
OpenAdvisories
Medium WID-SEC-2025-0832 2 CVEs

Autodesk AutoCAD und Civil 3D: Mehrere Schwachstellen ermöglichen Codeausführung

Published Apr 15, 2025 · Updated Apr 15, 2025 · de-DE

Vendor: Autodesk Product: AutoCAD Product: Civil 3D Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD und Civil 3D ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Daten zu manipulieren.

Product

AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.
Autodesk Civil 3D ist eine Software für die Detailplanung und Dokumentation im Tief- und Infrastrukturbau.

Vulnerabilities 2

  • High 7.8
    CVE-2025-1275

    JPG File Parsing Heap-Based Overflow Vulnerability

    A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in th…

    Autodesk AutoCAD AutoCAD Mechanical AutoCAD Plant 3D
  • High 7.8
    CVE-2025-1276

    DWG File Parsing Out-of-Bounds Write Vulnerability

    A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the cont…

    Autodesk AutoCAD AutoCAD MAP 3D AutoCAD MEP

Revision history

  1. #1

    Initiale Fassung

References