AL
Product
AutoCAD LT
87
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 78Medium 2Low 1
Watch
Add AutoCAD LT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7406 | 7.8 | Aug 6 | BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2 |
| CVE-2026-11803 | 7.8 | Aug 6 | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9 |
| CVE-2026-8325 | 7.8 | Aug 6 | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9 |
| CVE-2026-1289 | 7.8 | Aug 6 | PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9 |
| CVE-2026-16463 | 7.8 | Jul 29 | DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD Affected: 2027.0.0 before 2027.1.0 |
| CVE-2025-8894 | 7.8 | Sep 16 | PDF File Parsing Heap-Based Buffer Overflow Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-8893 | 7.8 | Sep 16 | PDF File Parsing Out-of-Bounds Write Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-5048 | 7.8 | Aug 15 | A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability Affected: 2026 |
| CVE-2025-5047 | 7.8 | Aug 15 | A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2026 |
| CVE-2025-5046 | 7.8 | Aug 15 | A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2026 |
| CVE-2025-1276 | 7.8 | Apr 15 | A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1275 | 7.8 | Apr 15 | A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2024-9997 | 7.8 | Oct 29 | A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9996 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9489 | 7.8 | Oct 29 | A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8896 | 7.8 | Oct 29 | A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization Affected: 2025 before 2025.1.1 |
| CVE-2024-7992 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow Affected: 2025 before 2025.1.1 |
| CVE-2024-7991 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-7305 | 7.8 | Aug 20 | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.6; 2025 before 2025.1 |
| CVE-2024-23138 | 7.8 | Mar 18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2022 before 2022.4.1; 2023 before 2023.1.5; 2023 before 2023.3.1; 2024 before 2024.1.2; +1 more |
| CVE-2023-41140 | 7.8 | Nov 23 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow Affected: before 2023.1.4; before 2024.1; 2024.0.0 before 2024.1.1 |
| CVE-2023-41139 | 7.8 | Nov 23 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer Affected: before 2023.1.4; before 2024.1; 2024.0.0 before 2024.1.1 |
| CVE-2023-29068 | 7.8 | Jun 27 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-25004 | 7.8 | Jun 27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-25003 | 7.8 | Jun 23 | A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-29067 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation Affected: 2023 before 2023.1.3 |
| CVE-2023-27915 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation Affected: 2023 before 2023.1.3 |
| CVE-2023-27914 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow Affected: 2023 before 2023.1.3 |
| CVE-2023-27913 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow Affected: 2023 before 2023.1.3 |
| CVE-2023-27912 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read Affected: 2023 before 2023.1.3 |
| CVE-2022-42938 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-41309 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-41310 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42933 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42934 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42935 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42936 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42937 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42939 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42940 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42941 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42942 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42943 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42944 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2021-40164 | 7.8 | Oct 7 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more |
| CVE-2021-40166 | 7.8 | Oct 7 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more |
| CVE-2021-40165 | 7.8 | Oct 7 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more |
| CVE-2021-40163 | 7.8 | Oct 7 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more |
| CVE-2021-40162 | 7.8 | Oct 7 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more |
| CVE-2022-33888 | 7.8 | Oct 3 | A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.3; 2023 before 2023.1.1 |
