CVE-2025-1275
📋 TL;DR
A heap-based buffer overflow vulnerability in Autodesk applications allows attackers to execute arbitrary code by tricking users into opening malicious JPG files. This affects users of Autodesk Access and DWG TrueView applications. Successful exploitation could lead to complete system compromise.
💻 Affected Systems
- Autodesk Access
- DWG TrueView
📦 What is this software?
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad Lt by Autodesk
Autocad Lt by Autodesk
Autocad Lt by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Dwg Trueview by Autodesk
Dwg Trueview by Autodesk
Dwg Trueview by Autodesk
Revit by Autodesk
Revit by Autodesk
Revit by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Remote code execution with full system compromise, data theft, and lateral movement capabilities
Likely Case
Application crash leading to denial of service, with potential for limited code execution
If Mitigated
Application crash without code execution if memory protections are enabled
🎯 Exploit Status
Exploitation requires user interaction to open malicious file
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Check vendor advisory for specific patched versions
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0006
Restart Required: Yes
Instructions:
1. Visit Autodesk Trust Center 2. Download latest security update 3. Install update 4. Restart affected applications
🔧 Temporary Workarounds
Disable JPG file processing
allPrevent applications from processing JPG files
File type restrictions
allBlock JPG files at network perimeter or endpoint
🧯 If You Can't Patch
- Restrict user permissions to limit impact of code execution
- Implement application whitelisting to prevent unauthorized execution
🔍 How to Verify
Check if Vulnerable:
Check application version against vendor advisoryCheck Version:
Check Help > About in affected applicationsVerify Fix Applied:
Verify application version matches patched version in advisory📡 Detection & Monitoring
Log Indicators:
- Application crashes when processing JPG files
- Memory access violations in application logs
Network Indicators:
- Unexpected JPG file downloads to affected systems
SIEM Query:
Application:Autodesk AND EventID:1000 AND FileExtension:jpg