CVE-2025-1428
📋 TL;DR
This vulnerability allows attackers to craft malicious CATPART files that trigger an out-of-bounds read when opened in Autodesk AutoCAD. Successful exploitation could lead to application crashes, sensitive data exposure, or arbitrary code execution. All AutoCAD users who open untrusted CATPART files are affected.
💻 Affected Systems
- Autodesk AutoCAD
- Autodesk AutoCAD LT
📦 What is this software?
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Advance Steel by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Autocad Mep by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
Civil 3d by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Arbitrary code execution with current process privileges, potentially leading to full system compromise if AutoCAD runs with elevated permissions.
Likely Case
Application crash or sensitive memory data leakage, disrupting workflows and potentially exposing confidential information.
If Mitigated
Limited impact with proper file handling policies and network segmentation, likely resulting in application crashes only.
🎯 Exploit Status
Exploitation requires user interaction to open malicious file. No public exploit code available at this time.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Latest AutoCAD/AutoCAD LT 2022 update (specific version not specified)
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0001
Restart Required: No
Instructions:
1. Open AutoCAD. 2. Navigate to Help > Check for Updates. 3. Install all available updates. 4. Alternatively, download latest update from Autodesk website.
🔧 Temporary Workarounds
Restrict CATPART file handling
allBlock or restrict opening of CATPART files from untrusted sources
🧯 If You Can't Patch
- Implement application whitelisting to restrict AutoCAD execution to trusted systems only
- Use network segmentation to isolate AutoCAD workstations from critical systems
🔍 How to Verify
Check if Vulnerable:
Check AutoCAD version against latest patched version in Autodesk advisoryCheck Version:
In AutoCAD: Type 'ABOUT' command or check Help > About AutoCADVerify Fix Applied:
Verify AutoCAD version is updated to latest release and test with known safe CATPART files📡 Detection & Monitoring
Log Indicators:
- AutoCAD crash logs with memory access violations
- Unexpected file parsing errors in application logs
Network Indicators:
- Unusual CATPART file downloads from untrusted sources
- AutoCAD process spawning unexpected child processes
SIEM Query:
EventID=1000 OR EventID=1001 AND ProcessName='acad.exe' AND ExceptionCode=0xC0000005