CVE-2022-25789

CAO 7.8CVE-2022-25789 · Công bố 11/04/2022 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2022-25789 là lỗ hổng mức CAO (CVSS 7.8) ảnh hưởng advance steel (autodesk), autocad (autodesk), autocad architecture (autodesk).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 1.6%, cao hơn 76.4% các lỗ hổng khác.
Cách xử lý: cập nhật lên 2019.1.4, 2020.1.5, 2021.1.2, 2022.1.2 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
advance steel autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2≥ 2022, < 2022.2.2`	`2019.1.42020.1.52021.1.22022.1.22022.2.2`
autocad architecture autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad electrical autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad lt autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad map 3d autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad mechanical autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad mep autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
autocad plant 3d autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`
civil 3d autodesk	`≥ 2019, < 2019.1.4≥ 2020, < 2020.1.5≥ 2021, < 2021.1.2≥ 2022, < 2022.1.2`	`2019.1.42020.1.52021.1.22022.1.2`

Mô tả

A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.