7.8
Élevée
CVE-2025-1275 A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based…
Description
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Revit 2025 | 2025 → < 2025.4.1 | 2025.4.1 |
| Revit 2024 | 2024 → < 2024.3.2 | 2024.3.2 |
| Revit 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Architecture 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
Afficher les 27 autres branches Masquer les 27 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AutoCAD Electrical 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD Electrical 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD MEP 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| Civil 3D 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| Civil 3D 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| Civil 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| Advance Steel 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| Advance Steel 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| Advance Steel 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD LT 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| AutoCAD LT 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| AutoCAD LT 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| DWG TrueView 2025 | 2025 → < 2025.1.2 | 2025.1.2 |
| DWG TrueView 2024 | 2024 → < 2024.1.7 | 2024.1.7 |
| DWG TrueView 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
Références
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Revit
Les 26 CVE de Revit →
CVE-2026-14255
A maliciously crafted IFC file, when parsed through certain Autodesk products, can trigger an Uncontrolled Recursion…
5.5
Moyenne
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
Élevée
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Moyenne
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
Élevée