CVE-2022-25788

תיאור (מקור, אנגלית)

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

2% (אחוזון 100) נכון ל-18/10/2026

CWE

CWE-787

מוצרים מושפעים

autodesk: advance steel; autodesk: autocad; autodesk: autocad architecture; autodesk: autocad electrical; autodesk: autocad lt; autodesk: autocad map 3d; autodesk: autocad mechanical; autodesk: autocad mep; autodesk: autocad plant 3d; autodesk: civil 3d; autodesk: inventor

קישורים

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002 Vendor Advisory