ZDI-25-153: Autodesk AutoCAD SLDPRT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-1431.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-153?
The ZDI-25-153 vulnerability has been assigned a CVSS rating indicating a high severity level due to its potential for remote code execution.
How do I fix ZDI-25-153?
To mitigate ZDI-25-153, ensure that you apply the latest security updates and patches provided by Autodesk for AutoCAD.
Who is affected by ZDI-25-153?
ZDI-25-153 affects users of Autodesk AutoCAD 2024 and possibly other versions if they are not updated.
What type of attack vector is involved in ZDI-25-153?
The attack vector for ZDI-25-153 requires user interaction, such as visiting a malicious page or opening a malicious file.
What are the potential consequences of exploiting ZDI-25-153?
Exploiting ZDI-25-153 could allow an attacker to execute arbitrary code, potentially compromising the affected system.