{"id":"CVE-2022-25792","state":"PUBLISHED","title":"A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vuln","description":"A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.","publishedAt":"2022-04-11T19:37:52.000Z","updatedAt":"2024-08-03T04:49:43.219Z","severity":null,"assigner":"autodesk","products":["n/a Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D"],"affected":[{"vendor":"n/a","product":"Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D","versions":[{"version":"2022.1.1","status":"affected"}]}],"references":["https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:46.971Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/25xxx/CVE-2022-25792.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-25792","state":"PUBLISHED","datePublished":"2022-04-11T19:37:52.000Z","dateUpdated":"2024-08-03T04:49:43.219Z","assignerShortName":"autodesk","assignerOrgId":"7e40ea87-bc65-4944-9723-dd79dd760601","dateReserved":"2022-02-22T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code."}],"affected":[{"vendor":"n/a","product":"Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D","versions":[{"version":"2022.1.1","status":"affected"}]}],"references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Buffer Overflow","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"autodesk","dateUpdated":"2022-04-11T19:37:52.000Z","orgId":"7e40ea87-bc65-4944-9723-dd79dd760601"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@autodesk.com","ID":"CVE-2022-25792","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, AutoCAD Plant 3D","version":{"version_data":[{"version_value":"2022.1.1"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Buffer Overflow"}]}]},"references":{"reference_data":[{"name":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005","refsource":"MISC","url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0005","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T04:49:43.219Z"}}]}}}