{"id":"CVE-2022-25788","title":"A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files","summary":"A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"autodesk","product":"advance_steel","affected":["advance_steel >= 2022, < 2022.1.2","autocad >= 2022, < 2022.1.2","autocad >= 2022, < 2022.2.2","autocad_architecture >= 2022, < 2022.1.2","autocad_electrical >= 2022, < 2022.1.2","autocad_lt >= 2022, < 2022.1.2","autocad_lt >= 2022, < 2022.2.2","autocad_map_3d >= 2022, < 2022.1.2","autocad_mechanical >= 2022, < 2022.1.2","autocad_mep >= 2022, < 2022.1.2","autocad_plant_3d >= 2022, < 2022.1.2","civil_3d >= 2022, < 2022.1.2","inventor >= 2022, < 2022.2"],"patched":["advance_steel 2022.1.2","autocad 2022.2.2","autocad_architecture 2022.1.2","autocad_electrical 2022.1.2","autocad_lt 2022.2.2","autocad_map_3d 2022.1.2","autocad_mechanical 2022.1.2","autocad_mep 2022.1.2","autocad_plant_3d 2022.1.2","civil_3d 2022.1.2","inventor 2022.2"],"published":"2022-04-19","updated":"2026-10-08","sourceUpdated":"2026-10-08T21:17:44.713","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-25788","references":[{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002","label":"psirt@autodesk.com"},{"url":"https://www.autodesk.com/trust/security-advisories/adsk-sa-2022-0002","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01603,"epssPercentile":0.75074,"ingestedAt":"2026-10-08T22:11:53.749Z","slug":"CVE-2022-25788","body":"## Overview\n\nA maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.\n\n## Affected\n\n- `advance_steel >= 2022, < 2022.1.2`\n- `autocad >= 2022, < 2022.1.2`\n- `autocad >= 2022, < 2022.2.2`\n- `autocad_architecture >= 2022, < 2022.1.2`\n- `autocad_electrical >= 2022, < 2022.1.2`\n- `autocad_lt >= 2022, < 2022.1.2`\n- `autocad_lt >= 2022, < 2022.2.2`\n- `autocad_map_3d >= 2022, < 2022.1.2`\n- `autocad_mechanical >= 2022, < 2022.1.2`\n- `autocad_mep >= 2022, < 2022.1.2`\n- `autocad_plant_3d >= 2022, < 2022.1.2`\n- `civil_3d >= 2022, < 2022.1.2`\n- `inventor >= 2022, < 2022.2`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `advance_steel 2022.1.2`\n- `autocad 2022.2.2`\n- `autocad_architecture 2022.1.2`\n- `autocad_electrical 2022.1.2`\n- `autocad_lt 2022.2.2`\n- `autocad_map_3d 2022.1.2`\n- `autocad_mechanical 2022.1.2`\n- `autocad_mep 2022.1.2`\n- `autocad_plant_3d 2022.1.2`\n- `civil_3d 2022.1.2`\n- `inventor 2022.2`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}