CVE-2022-25797: High severity autodesk dwg trueview 2023 vulnerability
A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Autodesk AutoCAD vulnerability?
The vulnerability ID is CVE-2022-25797.
What is the severity of CVE-2022-25797?
The severity of CVE-2022-25797 is high with a CVSS score of 7.8.
How does the vulnerability in Autodesk AutoCAD affect the software?
The vulnerability affects Autodesk AutoCAD versions 2022, 2021, 2020, and 2019.
What can an attacker do with a maliciously crafted PDF file in Autodesk AutoCAD?
An attacker can use a maliciously crafted PDF file to exploit the vulnerability in Autodesk AutoCAD and potentially execute arbitrary code.
Is there a fix available for the vulnerability in Autodesk AutoCAD?
Autodesk has released a security advisory (ADSK-SA-2022-0007) with recommendations and updates to address the vulnerability. It is recommended to apply the necessary patches or updates provided by Autodesk.