ZDI-25-158: Autodesk AutoCAD CATProduct File Parsing Uninitialized Variable Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-1650.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-158?
ZDI-25-158 has a CVSS rating indicating a high severity due to the potential for remote code execution.
How do I fix ZDI-25-158?
To mitigate the risks associated with ZDI-25-158, users should update their Autodesk AutoCAD software to the latest version provided by Autodesk.
Who is affected by ZDI-25-158?
ZDI-25-158 specifically affects users of Autodesk AutoCAD 2024.
What type of attacks does ZDI-25-158 allow?
ZDI-25-158 allows remote attackers to execute arbitrary code on affected installations.
Does ZDI-25-158 require user interaction for exploitation?
Yes, ZDI-25-158 requires user interaction, such as visiting a malicious page or opening a malicious file.