CVE-2022-25797

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-04-13 · updated 2026-06-17
Weakness: CWE-787

Description

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.

Affected products

Autodesk DWG TrueView: 2021, 2022

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007
https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0007

Get alerted when CVE-2022-25797 or the next vulnerability affects your stack