CVE-2022-25789: Use After Free
Published Apr 11, 2022
·Updated
A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Affected Software
41 affected components
Autodesk Advance Steel>=2019<2019.1.4
Autodesk Advance Steel>=2020<2020.1.5
Autodesk Advance Steel>=2021<2021.1.2
Autodesk Advance Steel>=2022<2022.1.2
Autodesk AutoCAD>=2019<2019.1.4
Autodesk AutoCAD>=2020<2020.1.5
Autodesk AutoCAD>=2021<2021.1.2
Autodesk AutoCAD>=2022<2022.1.2
Autodesk Autocad Macos>=2022<2022.2.2
Autodesk AutoCAD Architecture>=2019<2019.1.4
Autodesk AutoCAD Architecture>=2020<2020.1.5
Autodesk AutoCAD Architecture>=2021<2021.1.2
Autodesk AutoCAD Architecture>=2022<2022.1.2
Autodesk AutoCAD Electrical>=2019<2019.1.4
Autodesk AutoCAD Electrical>=2020<2020.1.5
Autodesk AutoCAD Electrical>=2021<2021.1.2
Autodesk AutoCAD Electrical>=2022<2022.1.2
Autodesk AutoCAD LT>=2019<2019.1.4
Autodesk AutoCAD LT>=2020<2020.1.5
Autodesk AutoCAD LT>=2021<2021.1.2
Autodesk AutoCAD LT>=2022<2022.1.2
Autodesk AutoCAD Map 3D>=2019<2019.1.4
Autodesk AutoCAD Map 3D>=2020<2020.1.5
Autodesk AutoCAD Map 3D>=2021<2021.1.2
Autodesk AutoCAD Map 3D>=2022<2022.1.2
Autodesk AutoCAD Mechanical>=2019<2019.1.4
Autodesk AutoCAD Mechanical>=2020<2020.1.5
Autodesk AutoCAD Mechanical>=2021<2021.1.2
Autodesk AutoCAD Mechanical>=2022<2022.1.2
Autodesk AutoCAD MEP>=2019<2019.1.4
Autodesk AutoCAD MEP>=2020<2020.1.5
Autodesk AutoCAD MEP>=2021<2021.1.2
Autodesk AutoCAD MEP>=2022<2022.1.2
Autodesk AutoCAD Plant 3D>=2019<2019.1.4
Autodesk AutoCAD Plant 3D>=2020<2020.1.5
Autodesk AutoCAD Plant 3D>=2021<2021.1.2
Autodesk AutoCAD Plant 3D>=2022<2022.1.2
Autodesk Civil 3D>=2019<2019.1.4
Autodesk Civil 3D>=2020<2020.1.5
Autodesk Civil 3D>=2021<2021.1.2
Autodesk Civil 3D>=2022<2022.1.2
Event History
Apr 11, 2022
CVE Published
via MITRE·07:37 PM
Data Sourced
via MITRE·07:37 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-25789?
The severity of CVE-2022-25789 is high with a severity value of 7.8.
2
Which software versions are affected by CVE-2022-25789?
Autodesk Advance Steel versions 2019.1.4 to 2022.1.2 and Autodesk Autocad versions 2019.1.4 to 2022.2.2 are affected by CVE-2022-25789.
3
How can CVE-2022-25789 be exploited?
CVE-2022-25789 can be exploited by using maliciously crafted DWF, 3DS, and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, and 2019.
4
What is the impact of exploiting CVE-2022-25789?
Exploiting CVE-2022-25789 may lead to code execution.
5
How can I fix CVE-2022-25789?
To fix CVE-2022-25789, update to the latest version of Autodesk Advance Steel or Autodesk Autocad.