A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
History

Wed, 16 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 15 Apr 2025 21:00:00 +0000

Type Values Removed Values Added
Description A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Title JPG File Parsing Heap-Based Overflow Vulnerability
Weaknesses CWE-122
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2025-04-15T20:54:30.139Z

Updated: 2025-04-25T14:40:25.842Z

Reserved: 2025-02-13T15:16:30.397Z

Link: CVE-2025-1275

cve-icon Vulnrichment

Updated: 2025-04-16T14:23:23.476Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-04-15T21:15:47.197

Modified: 2025-04-16T13:25:59.640

Link: CVE-2025-1275

cve-icon Redhat

No data.