Summary
Ein Angreifer kann mehrere Schwachstellen in Autodesk AutoCAD, Autodesk 3ds Max, Autodesk Civil 3D und Autodesk InfraWorks ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, um Daten zu manipulieren, und um Informationen offenzulegen.
Product
AutoCAD ist Teil der CAD (Computer Aided Design) Produktpalette von Autodesk.
Autodesk 3ds Max ist eine 3D-Modellierungs-, Animations- und Rendering-Software.
Autodesk Civil 3D ist eine Software für die Detailplanung und Dokumentation im Tief- und Infrastrukturbau.
Autodesk InfraWorks ist eine Software für die Modellierung und Visualisierung von Infrastrukturprojekten im Kontext der realen Welt.
Vulnerabilities 20
-
High 7.8
CATPRODUCT File Parsing Heap-Based Overflow Vulnerability
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the cont…
-
High 7.8
Multiple Vulnerabilities in Certain Autodesk Products
A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context …
-
High 7.8
CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the cont…
-
High 7.8
CATPART File Parsing Out-of-Bounds Write Vulnerability
AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the con…
-
High 7.8
MODEL File Parsing Memory Corruption Vulnerability
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
MODEL File Parsing Memory Corruption Vulnerability
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
MODEL File Parsing Out-of-Bounds Write Vulnerability
AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte…
-
High 7.8
CATPART File Parsing Memory Corruption Vulnerability
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
Multiple Vulnerabilities in Certain Autodesk Products
A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the contex…
-
High 7.8
MODEL File Parsing Out-of-Bounds Write Vulnerability
AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte…
-
High 7.8
MODEL File Parsing Out-of-Bounds Write Vulnerability
AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the conte…
-
High 7.8
CATPART File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context…
-
High 7.8
SLDPRT File Parsing Memory Corruption Vulnerability
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
PRT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of …
-
High 7.8
PRT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of …
-
High 7.8
CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the cont…
-
High 7.8
SLDPRT File Parsing Memory Corruption Vulnerability
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
PRT File Parsing Memory Corruption Vulnerability
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
-
High 7.8
SLDPRT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context …
-
High 7.8
SLDPRT File Parsing Out-of-Bounds Read Vulnerability
A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context …
Revision history
-
#2
Referenz(en) aufgenommen: ZDI-25-1135, ZDI-CAN-27960, ZDI-25-1114, ZDI-CAN-27966, ZDI-25-1111, ZDI-CAN-27974, ZDI-25-1112, ZDI-CAN-27973, ZDI-25-1113, ZDI-CAN-27967, ZDI-25-1115, ZDI-CAN-27961, ZDI-25-1116, ZDI-CAN-27964, ZDI-25-1117, ZDI-CAN-27963, ZDI-25-1118, ZDI-CAN-27972, ZDI-25-1119, ZDI-CAN-27971, ZDI-25-1123, ZDI-CAN-28421, ZDI-25-1122, ZDI-CAN-28179, ZDI-25-1121, ZDI-CAN-28180, ZDI-25-1120, ZDI-CAN-27970, ZDI-25-1105, ZDI-CAN-28181, ZDI-25-1106, ZDI-CAN-28128, ZDI-25-1107, ZDI-CAN-28127, ZDI-25-1108, ZDI-CAN-28126, ZDI-25-1109, ZDI-CAN-28120, ZDI-25-1110, ZDI-CAN-27998
-
#1
Initiale Fassung
References
-
Autodesk Trust Center Security advisory vom 2025-12-15
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0024