CVE-2025-1276: Autodesk Advance Steel
High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Affected products
- Autodesk Advance Steel: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Architecture: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Electrical: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Lt: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Map 3d: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Mechanical: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Mep: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Autocad Plant 3d: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Civil 3d: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Dwg Trueview: from 2023, before 2023.1.7 (fixed in 2023.1.7); from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Infrastructure Parts Editor: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Inventor: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Navisworks Manage: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Navisworks Simulate: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Revit: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
- Autodesk Vault: from 2024, before 2024.1.7 (fixed in 2024.1.7); from 2025, before 2025.1.2 (fixed in 2025.1.2)
Published 2025-04-15. Last modified 2026-06-17.