Out-of-Bounds Read and Write Vulnerabilities for Autodesk AutoCAD

Description

A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.

Affected Applications

AutoCAD

CVE References

CVE-2021-40158 CVE-2022-25788

Other References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002