ZDI-25-161: Autodesk AutoCAD CATPART File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-1428.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-25-161?
ZDI-25-161 has been assigned a CVSS rating that indicates a significant risk to affected installations.
How do I fix ZDI-25-161?
To mitigate ZDI-25-161, users should update Autodesk AutoCAD to the latest version as recommended by the vendor.
What kind of attacks can exploit ZDI-25-161?
ZDI-25-161 allows remote attackers to execute arbitrary code via malicious pages or files that require user interaction.
Which versions of Autodesk AutoCAD are affected by ZDI-25-161?
ZDI-25-161 affects Autodesk AutoCAD 2024, among potentially other versions.
What is required for an attacker to successfully exploit ZDI-25-161?
User interaction is required, as the target needs to visit a malicious page or open a malicious file for exploitation.