CVE-2025-1431 - Vulnerability Details - OpenCVE

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001

History

Thu, 13 Mar 2025 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 13 Mar 2025 17:00:00 +0000

Type	Values Removed	Values Added
Description		A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Title		SLDPRT File Parsing Out-of-Bounds Read Vulnerability
Weaknesses		CWE-125
References		https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: autodesk

Published: 2025-03-13T16:48:51.554Z

Updated: 2025-03-13T18:54:43.841Z

Reserved: 2025-02-18T14:22:15.667Z

Link: CVE-2025-1431

Vulnrichment

Updated: 2025-03-13T18:54:40.538Z

NVD

Status : Received

Published: 2025-03-13T17:15:35.377

Modified: 2025-03-13T17:15:35.377

Link: CVE-2025-1431

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-1431", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "state": "PUBLISHED", "assignerShortName": "autodesk", "dateReserved": "2025-02-18T14:22:15.667Z", "datePublished": "2025-03-13T16:48:51.554Z", "dateUpdated": "2025-03-13T18:54:43.841Z"}, "containers": {"cna": {"affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Architecture", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Electrical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Mechanical", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MEP", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD Plant 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Civil 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "Advance Steel", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "product": "AutoCAD MAP 3D", "vendor": "Autodesk", "versions": [{"lessThan": "2025.1.2", "status": "affected", "version": "2025", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.<br>"}], "value": "A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process."}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-125", "description": "CWE-125 Out-of-Bounds Read", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-03-13T16:48:51.554Z"}, "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001"}], "source": {"discovery": "EXTERNAL"}, "title": "SLDPRT File Parsing Out-of-Bounds Read Vulnerability", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-13T18:54:36.016368Z", "id": "CVE-2025-1431", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T18:54:43.841Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1431", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-13T18:54:36.016368Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-13T18:54:40.538Z"}}], "cna": {"title": "SLDPRT File Parsing Out-of-Bounds Read Vulnerability", "source": {"discovery": "EXTERNAL"}, "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpe": ["cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Architecture", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Electrical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Mechanical", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MEP", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD Plant 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Civil 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "Advance Steel", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpe": ["cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*"], "vendor": "Autodesk", "product": "AutoCAD MAP 3D", "versions": [{"status": "affected", "version": "2025", "lessThan": "2025.1.2", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.", "supportingMedia": [{"type": "text/html", "value": "A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-Bounds Read"}]}], "providerMetadata": {"orgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "shortName": "autodesk", "dateUpdated": "2025-03-13T16:48:51.554Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1431", "state": "PUBLISHED", "dateUpdated": "2025-03-13T18:54:43.841Z", "dateReserved": "2025-02-18T14:22:15.667Z", "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601", "datePublished": "2025-03-13T16:48:51.554Z", "assignerShortName": "autodesk"}, "dataVersion": "5.1"}