CVE-2025-1276

published 2025-04-15

CVE-2025-1276: A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected

47 ranges · showing 25

Vendor	Product	Version range	Fixed in
autodesk	advance_steel	>= 2023 < 2023.1.7	2023.1.7
autodesk	advance_steel	>= 2024 < 2024.1.7	2024.1.7
autodesk	advance_steel	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_architecture	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_architecture	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_architecture	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_electrical	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_electrical	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_electrical	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_lt	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_lt	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_lt	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_map_3d	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_map_3d	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_map_3d	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_mechanical	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_mechanical	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_mechanical	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_mep	>= 2023 < 2023.1.7	2023.1.7
autodesk	autocad_mep	>= 2024 < 2024.1.7	2024.1.7
autodesk	autocad_mep	>= 2025 < 2025.1.2	2025.1.2
autodesk	autocad_plant_3d	>= 2023 < 2023.1.7	2023.1.7

CWE-787