A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
History

Wed, 16 Apr 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 15 Apr 2025 21:00:00 +0000

Type Values Removed Values Added
Description A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Title DWG File Parsing Out-of-Bounds Write Vulnerability
Weaknesses CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2025-04-15T20:55:04.255Z

Updated: 2025-05-14T18:12:53.915Z

Reserved: 2025-02-13T15:16:31.469Z

Link: CVE-2025-1276

cve-icon Vulnrichment

Updated: 2025-04-16T14:23:21.882Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-04-15T21:15:47.320

Modified: 2025-04-16T13:25:59.640

Link: CVE-2025-1276

cve-icon Redhat

No data.