Description
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
Scores
CVSS v3
7.8
EPSS
0.0012
EPSS Percentile
30.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-755
Status
published
Products (10)
autodesk/autocad
2022 - 2022.1.3
autodesk/autocad_advance_steel
2022 - 2022.1.3
autodesk/autocad_architecture
2022 - 2022.1.3
autodesk/autocad_civil_3d
2022 - 2022.1.3
autodesk/autocad_electrical
2022 - 2022.1.3
autodesk/autocad_lt
2022 - 2022.1.3
autodesk/autocad_map_3d
2022 - 2022.1.3
autodesk/autocad_mechanical
2022 - 2022.1.3
autodesk/autocad_mep
2022 - 2022.1.3
autodesk/autocad_plant_3d
2022 - 2022.1.3
Published
Oct 03, 2022
Tracked Since
Feb 18, 2026