Autodesk
Page 2 of 4 — Autodesk CVEs from a corpus of 377, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-1431 | High | 7.8 | 2025-03-13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vul… |
CVE-2025-1430 | High | 7.8 | 2025-03-13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulne… |
CVE-2025-1429 | High | 7.8 | 2025-03-13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vuln… |
CVE-2025-1428 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vu… |
CVE-2025-1427 | High | 7.8 | 2025-03-13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage… |
CVE-2024-12671 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12670 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can lever… |
CVE-2024-12669 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can lever… |
CVE-2024-12200 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12199 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12198 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12197 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12194 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vuln… |
CVE-2024-12193 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12192 | High | 7.8 | 2024-12-17 | A maliciously crafted DWF file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vu… |
CVE-2024-12191 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this v… |
CVE-2024-12179 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can lever… |
CVE-2024-12178 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vuln… |
CVE-2024-11422 | High | 7.8 | 2024-12-17 | A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this v… |
CVE-2024-11608 | High | 7.8 | 2024-12-09 | A maliciously crafted SKP file, when linked or imported into Autodesk Revit, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vu… |
CVE-2024-11454 | High | 7.8 | 2024-12-09 | A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context o… |
CVE-2024-11268 | Medium | 5.5 | 2024-12-09 | A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause… |
CVE-2023-7298 | Medium | 4.4 | 2024-12-09 | A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulne… |
CVE-2024-9500 | High | 7.8 | 2024-11-15 | A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges t… |
CVE-2024-7995 | High | 7.8 | 2024-11-05 | A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized… |
CVE-2024-9997 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage t… |
CVE-2024-9996 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may lever… |
CVE-2024-9827 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can lev… |
CVE-2024-9826 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage thi… |
CVE-2024-9489 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage thi… |
CVE-2024-8896 | High | 7.8 | 2024-10-29 | A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can… |
CVE-2024-8600 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8599 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8598 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can lev… |
CVE-2024-8597 | High | 7.8 | 2024-10-29 | A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leve… |
CVE-2024-8596 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-8595 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage… |
CVE-2024-8594 | High | 7.8 | 2024-10-29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can lev… |
CVE-2024-8593 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor… |
CVE-2024-8592 | High | 7.8 | 2024-10-29 | A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor ca… |
CVE-2024-8591 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious act… |
CVE-2024-8590 | High | 7.8 | 2024-10-29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage th… |
CVE-2024-8589 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-8588 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can le… |
CVE-2024-7992 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious a… |
CVE-2024-7991 | High | 7.8 | 2024-10-29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability. A mali… |
CVE-2024-8587 | High | 7.8 | 2024-10-29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious acto… |
CVE-2024-7994 | High | 7.8 | 2024-10-16 | A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability… |
CVE-2024-7993 | High | 7.8 | 2024-10-16 | A maliciously crafted PDF file, when parsed through Autodesk Revit, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnera… |
CVE-2024-7675 | High | 7.8 | 2024-09-30 | A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerabi… |
CVE-2024-7674 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage… |
CVE-2024-7673 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage t… |
CVE-2024-7672 | High | 7.8 | 2024-09-30 | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious ac… |
CVE-2024-7671 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-7670 | High | 7.8 | 2024-09-30 | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vul… |
CVE-2024-37008 | High | 7.8 | 2024-08-21 | A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow. A malicious actor can leverage this vulnerability to execute arb… |
CVE-2024-7305 | High | 7.8 | 2024-08-20 | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may lev… |
CVE-2024-37007 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability… |
CVE-2024-37006 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access v… |
CVE-2024-37005 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-37004 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability… |
CVE-2024-37003 | High | 7.8 | 2024-06-25 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Ove… |
CVE-2024-36999 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage th… |
CVE-2024-23159 | High | 7.8 | 2024-06-25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability… |
CVE-2024-23158 | High | 7.8 | 2024-06-25 | A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. A malicio… |
CVE-2024-23157 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write… |
CVE-2024-23156 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability b… |
CVE-2024-23155 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. A mali… |
CVE-2024-23154 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor ca… |
CVE-2024-23153 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage this… |
CVE-2024-23152 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can leverage thi… |
CVE-2024-23151 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-23150 | High | 7.8 | 2024-06-25 | A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may le… |
CVE-2024-37002 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, alon… |
CVE-2024-37001 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can l… |
CVE-2024-37000 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violat… |
CVE-2024-23149 | High | 7.8 | 2024-06-25 | A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage t… |
CVE-2024-23148 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access v… |
CVE-2024-23147 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption… |
CVE-2024-23146 | High | 7.8 | 2024-06-25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicio… |
CVE-2024-23145 | High | 7.8 | 2024-06-25 | A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this… |
CVE-2024-23144 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A m… |
CVE-2024-23143 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read… |
CVE-2024-23142 | High | 7.8 | 2024-06-25 | A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cau… |
CVE-2024-23141 | High | 7.8 | 2024-06-25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. This vulnerability, along with other vulnera… |
CVE-2024-23140 | High | 7.8 | 2024-06-25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read. A malicio… |
CVE-2024-23139 | High | 7.8 | 2024-03-18 | A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerabi… |
CVE-2024-23138 | High | 7.8 | 2024-03-18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulne… |
CVE-2024-23137 | High | 7.8 | 2024-02-22 | A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerabilit… |
CVE-2024-23136 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability… |
CVE-2024-23135 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vulnerability… |
CVE-2024-23134 | High | 7.8 | 2024-02-22 | A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with oth… |
CVE-2024-23133 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access viol… |
CVE-2024-23132 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access… |
CVE-2024-23131 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead… |
CVE-2024-23130 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write… |
CVE-2024-23129 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability… |
CVE-2024-23128 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerabilit… |
CVE-2024-23127 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-… |
CVE-2024-23126 | High | 7.8 | 2024-02-22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leve… |