Autodesk
Page 3 of 4 — Autodesk CVEs from a corpus of 377, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-23125 | High | 7.8 | 2024-02-22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can le… |
CVE-2024-23124 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor ma… |
CVE-2024-23123 | High | 7.8 | 2024-02-22 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A m… |
CVE-2024-23122 | High | 7.8 | 2024-02-22 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may le… |
CVE-2024-23121 | High | 7.8 | 2024-02-22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may… |
CVE-2024-23120 | High | 7.8 | 2024-02-22 | A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vuln… |
CVE-2024-0446 | High | 7.8 | 2024-02-22 | A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Writ… |
CVE-2023-41140 | High | 7.8 | 2023-11-23 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leve… |
CVE-2023-41139 | High | 7.8 | 2023-11-23 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along wi… |
CVE-2023-29076 | Critical | 9.8 | 2023-11-23 | A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This v… |
CVE-2023-29075 | Critical | 9.8 | 2023-11-23 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage t… |
CVE-2023-29074 | Critical | 9.8 | 2023-11-23 | A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can levera… |
CVE-2023-29073 | Critical | 9.8 | 2023-11-23 | A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can le… |
CVE-2023-41146 | Medium | 4.3 | 2023-11-22 | Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account. |
CVE-2023-41145 | Medium | 5.3 | 2023-11-22 | Autodesk users who no longer have an active license for an account can still access cases for that account. |
CVE-2023-29069 | High | 7.8 | 2023-11-22 | A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These… |
CVE-2023-25002 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execut… |
CVE-2023-25001 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lea… |
CVE-2023-29068 | High | 7.8 | 2023-06-27 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other… |
CVE-2023-25004 | High | 7.8 | 2023-06-27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lea… |
CVE-2023-27908 | High | 7.8 | 2023-06-23 | A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Priv… |
CVE-2023-25003 | High | 7.8 | 2023-06-23 | A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitat… |
CVE-2023-25009 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution. |
CVE-2023-25008 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution. |
CVE-2023-25007 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution. |
CVE-2023-25006 | High | 7.8 | 2023-05-12 | A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution. |
CVE-2023-25005 | High | 7.8 | 2023-05-12 | A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to… |
CVE-2023-27911 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lea… |
CVE-2023-27910 | High | 7.8 | 2023-04-17 | A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may le… |
CVE-2023-27909 | High | 7.8 | 2023-04-17 | An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or informatio… |
CVE-2023-27907 | High | 7.8 | 2023-04-17 | A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution. |
CVE-2023-27906 | High | 7.8 | 2023-04-17 | A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution. |
CVE-2023-25010 | High | 7.8 | 2023-04-17 | A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution. |
CVE-2023-29067 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulner… |
CVE-2023-27915 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnera… |
CVE-2023-27914 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A… |
CVE-2023-27913 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulner… |
CVE-2023-27912 | High | 7.8 | 2023-04-14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to… |
CVE-2022-42947 | High | 7.8 | 2022-12-19 | A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to… |
CVE-2022-42946 | High | 7.1 | 2022-12-19 | Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 and 2022 to read beyond allocated buffer. This vulnerability in conjunction with ot… |
CVE-2022-42945 | High | 7.8 | 2022-12-19 | DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code executi… |
CVE-2022-42944 | High | 7.8 | 2022-10-21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-42943 | High | 7.8 | 2022-10-21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-42942 | High | 7.8 | 2022-10-21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-42941 | High | 7.8 | 2022-10-21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-42940 | High | 7.8 | 2022-10-21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunctio… |
CVE-2022-42939 | High | 7.8 | 2022-10-21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunctio… |
CVE-2022-42938 | High | 7.8 | 2022-10-21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunctio… |
CVE-2022-42937 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-42936 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-42935 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-42934 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-42933 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41310 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41309 | High | 7.8 | 2022-10-21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41308 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41307 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-41306 | High | 7.8 | 2022-10-14 | A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This… |
CVE-2022-41305 | High | 7.8 | 2022-10-14 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-41304 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information… |
CVE-2022-41303 | High | 7.8 | 2022-10-14 | A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the applicati… |
CVE-2022-41302 | High | 7.8 | 2022-10-14 | An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafte… |
CVE-2021-40166 | High | 7.8 | 2022-10-07 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them… |
CVE-2021-40165 | High | 7.8 | 2022-10-07 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF… |
CVE-2021-40164 | High | 7.8 | 2022-10-07 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code. |
CVE-2021-40163 | High | 7.8 | 2022-10-07 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component. |
CVE-2021-40162 | High | 7.8 | 2022-10-07 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TI… |
CVE-2022-33882 | Critical | 9.8 | 2022-10-03 | Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop… |
CVE-2022-41301 | High | 7.8 | 2022-10-03 | A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-33890 | High | 7.8 | 2022-10-03 | A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation… |
CVE-2022-33889 | High | 7.8 | 2022-10-03 | A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated… |
CVE-2022-33888 | High | 7.8 | 2022-10-03 | A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This… |
CVE-2022-33887 | High | 7.8 | 2022-10-03 | A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a… |
CVE-2022-33886 | High | 7.8 | 2022-10-03 | A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and… |
CVE-2022-33885 | High | 7.8 | 2022-10-03 | A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulner… |
CVE-2022-33884 | High | 7.5 | 2022-10-03 | Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with oth… |
CVE-2022-33883 | High | 7.8 | 2022-10-03 | A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to… |
CVE-2022-25793 | High | 7.8 | 2022-08-10 | A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the le… |
CVE-2022-27866 | High | 7.8 | 2022-07-29 | A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file… |
CVE-2022-27865 | High | 7.8 | 2022-07-29 | A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. Th… |
CVE-2022-27864 | High | 8.8 | 2022-07-29 | A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations… |
CVE-2022-33881 | High | 7.8 | 2022-07-29 | Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulner… |
CVE-2022-27873 | High | 7.8 | 2022-07-29 | An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document… |
CVE-2022-27872 | High | 7.8 | 2022-06-21 | A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulner… |
CVE-2022-27871 | High | 7.8 | 2022-06-21 | Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated bu… |
CVE-2022-27870 | High | 7.8 | 2022-06-21 | A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be expl… |
CVE-2022-27869 | High | 7.8 | 2022-06-21 | A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerabi… |
CVE-2022-27868 | High | 7.8 | 2022-06-21 | A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to cod… |
CVE-2022-27867 | High | 7.8 | 2022-06-21 | A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerabilit… |
CVE-2022-27532 | High | 7.8 | 2022-06-16 | A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability i… |
CVE-2022-27531 | High | 7.8 | 2022-06-16 | A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerabil… |
CVE-2022-27527 | High | 7.8 | 2022-04-19 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autod… |
CVE-2022-25788 | High | 7.8 | 2022-04-19 | A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be explo… |
CVE-2022-27530 | High | 7.8 | 2022-04-18 | A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vuln… |
CVE-2022-27529 | High | 7.8 | 2022-04-18 | A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT… |
CVE-2022-27526 | High | 7.8 | 2022-04-18 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunctio… |
CVE-2022-27525 | High | 7.8 | 2022-04-18 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violatio… |
CVE-2022-27524 | High | 7.1 | 2022-04-13 | An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafte… |
CVE-2022-27523 | High | 7.1 | 2022-04-13 | A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted D… |
CVE-2022-25797 | High | 7.8 | 2022-04-13 | A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF… |