A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0004 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jul 2025, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:inventor:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:infrastructure_parts_editor:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:* cpe:2.3:a:autodesk:vault:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:revit:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* |
|
| First Time |
Autodesk
Autodesk vault Autodesk autocad Map 3d Autodesk autocad Lt Autodesk autocad Architecture Autodesk advance Steel Autodesk civil 3d Autodesk dwg Trueview Autodesk autocad Autodesk autocad Mechanical Autodesk autocad Electrical Autodesk autocad Plant 3d Autodesk revit Autodesk infrastructure Parts Editor Autodesk autocad Mep Autodesk navisworks Simulate Autodesk navisworks Manage Autodesk inventor |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0004 - Vendor Advisory |
16 Apr 2025, 13:25
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Apr 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-15 21:15
Updated : 2025-07-30 17:25
NVD link : CVE-2025-1276
Mitre link : CVE-2025-1276
CVE.ORG link : CVE-2025-1276
JSON object : View
Products Affected
autodesk
- autocad_architecture
- autocad_electrical
- autocad
- civil_3d
- advance_steel
- autocad_mep
- navisworks_simulate
- vault
- autocad_mechanical
- inventor
- infrastructure_parts_editor
- navisworks_manage
- autocad_lt
- dwg_trueview
- autocad_plant_3d
- revit
- autocad_map_3d
CWE
CWE-787
Out-of-bounds Write