vulnerability

AutoDesk AutoCAD: CVE-2022-25790: Security Advisory for Autodesk AutoCAD, Advance Steel and Civil 3D, Navisworks - ADSK-SA-2022-0005

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:P)

Published

Feb 28, 2022

Added

Jul 22, 2025

Modified

May 29, 2026

Description

CVE-2022-25790 - A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022, 2020, and 2019 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.

Solution

autodesk-autocad-upgrade-latest

References

CVE-2022-25790
https://attackerkb.com/topics/CVE-2022-25790
https://www.cve.org/CVERecord?id=CVE-2022-25790
https://www.autodesk.com/trust/security-advisories/ADSK-SA-2022-0005
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-30430
CWE-787
EUVD-EUVD-2022-30430

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report