A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Metrics
Affected Vendors & Products
References
History
Thu, 08 May 2025 16:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Autodesk
Autodesk advance Steel Autodesk autocad Autodesk autocad Architecture Autodesk autocad Electrical Autodesk autocad Map 3d Autodesk autocad Mechanical Autodesk autocad Mep Autodesk autocad Plant 3d Autodesk civil 3d |
|
Weaknesses | CWE-787 | |
CPEs | cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* |
|
Vendors & Products |
Autodesk
Autodesk advance Steel Autodesk autocad Autodesk autocad Architecture Autodesk autocad Electrical Autodesk autocad Map 3d Autodesk autocad Mechanical Autodesk autocad Mep Autodesk autocad Plant 3d Autodesk civil 3d |
Fri, 04 Apr 2025 14:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | MODEL File Parsing Heap-based Buffer Overflow Vulnerability | MODEL File Parsing Heap-Based Buffer Overflow Vulnerability |
Fri, 04 Apr 2025 13:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Title | MODEL File Parsing Heap-Based Buffer Overflow Vulnerability | MODEL File Parsing Heap-based Buffer Overflow Vulnerability |
Thu, 13 Mar 2025 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 13 Mar 2025 17:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. | |
Title | MODEL File Parsing Heap-Based Buffer Overflow Vulnerability | |
Weaknesses | CWE-122 | |
References |
| |
Metrics |
cvssV3_1
|

Status: PUBLISHED
Assigner: autodesk
Published: 2025-03-13T16:47:42.309Z
Updated: 2025-04-25T03:55:40.927Z
Reserved: 2025-02-18T14:22:13.685Z
Link: CVE-2025-1429

Updated: 2025-03-13T18:58:53.173Z

Status : Analyzed
Published: 2025-03-13T17:15:35.053
Modified: 2025-05-08T15:38:01.280
Link: CVE-2025-1429

No data.