VULNERABILITY INTELLIGENCE
CVE-2022-25791
CVSS score7.8 HIGH
EPSS probability0.66%
CISA KEVNot currently listed
Published2022-04-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.
Weakness classification
- nvd@nist.gov: CWE-787
Primary references
- psirt@autodesk.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory