ZDI-CAN-28120: ZDI-25-1109: Autodesk AutoCAD MODEL File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2025-10886.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-28120?
ZDI-CAN-28120 has a CVSS rating indicating it is a critical vulnerability due to the potential for remote code execution.
How do I fix ZDI-CAN-28120?
To address ZDI-CAN-28120, users should update Autodesk AutoCAD to the latest version provided by Autodesk that contains the necessary security patches.
What systems are affected by ZDI-CAN-28120?
ZDI-CAN-28120 affects various installations of Autodesk AutoCAD.
What type of attack is ZDI-CAN-28120 associated with?
ZDI-CAN-28120 allows remote attackers to execute arbitrary code through social engineering tactics like malicious pages or files.
Is user interaction needed to exploit ZDI-CAN-28120?
Yes, user interaction is required for ZDI-CAN-28120 as the target must visit a malicious page or open a malicious file.