CVE-2025-1652
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Mar 13, 2025
CWE ID 125
Summary
CVE-2025-1652 is a vulnerability affecting Autodesk AutoCAD software. Maliciously crafted MODEL files can trigger an Out-of-Bounds Read issue in the parsing process. This flaw could result in a crash, unauthorized data access, or code execution in the context of the current process. Attackers can exploit this vulnerability by persuading victims to open a specially crafted file. Autodesk urges users to apply the available patch to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- AutoCAD MEP
- Civil 3D
- AutoCAD
- AutoCAD Plant 3D
- Autodesk Autocad Architecture
Affected Vendors
- Autodesk