AL
Product
AutoCAD LT
by Autodesk · last CVE Aug 6, 2026
87
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 78Medium 2Low 1
Watch

Add AutoCAD LT to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-7406
7.8
0%
Aug 6
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2
CVE-2026-11803
7.8
0%
Aug 6
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9
CVE-2026-8325
7.8
0%
Aug 6
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9
CVE-2026-1289
7.8
0%
Aug 6
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
Affected: 2027.0.0 before 2027.1.0; 2026.0.0 before 2026.1.2; 2025.0.0 before 2025.1.4; 2024.0.0 before 2024.1.9
CVE-2026-16463
7.8
0%
Jul 29
DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD
Affected: 2027.0.0 before 2027.1.0
CVE-2025-8894
7.8
0%
Sep 16
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability
Affected: 2024 before 2024.1.8; 2025 before 2025.1.3; 2026 before 2026.1
CVE-2025-8893
7.8
0%
Sep 16
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability
Affected: 2024 before 2024.1.8; 2025 before 2025.1.3; 2026 before 2026.1
CVE-2025-5048
7.8
0%
Aug 15
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability
Affected: 2026
CVE-2025-5047
7.8
0%
Aug 15
A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability
Affected: 2026
CVE-2025-5046
7.8
0%
Aug 15
A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability
Affected: 2026
CVE-2025-1276
7.8
0%
Apr 15
A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability
Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2025-1275
7.8
0%
Apr 15
A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability
Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2
CVE-2024-9997
7.8
0%
Oct 29
A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability
Affected: 2025 before 2025.1.1
CVE-2024-9996
7.8
0%
Oct 29
A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2025 before 2025.1.1
CVE-2024-9489
7.8
0%
Oct 29
A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability
Affected: 2025 before 2025.1.1
CVE-2024-8896
7.8
0%
Oct 29
A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization
Affected: 2025 before 2025.1.1
CVE-2024-7992
7.8
0%
Oct 29
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow
Affected: 2025 before 2025.1.1
CVE-2024-7991
7.8
0%
Oct 29
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability
Affected: 2025 before 2025.1.1
CVE-2024-7305
7.8
0%
Aug 20
A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.6; 2025 before 2025.1
CVE-2024-23138
7.8
0%
Mar 18
A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2022 before 2022.4.1; 2023 before 2023.1.5; 2023 before 2023.3.1; 2024 before 2024.1.2; +1 more
CVE-2023-41140
7.8
0%
Nov 23
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow
Affected: before 2023.1.4; before 2024.1; 2024.0.0 before 2024.1.1
CVE-2023-41139
7.8
0%
Nov 23
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer
Affected: before 2023.1.4; before 2024.1; 2024.0.0 before 2024.1.1
CVE-2023-29068
7.8
0%
Jun 27
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-25004
7.8
0%
Jun 27
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-25003
7.8
0%
Jun 23
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-29067
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation
Affected: 2023 before 2023.1.3
CVE-2023-27915
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation
Affected: 2023 before 2023.1.3
CVE-2023-27914
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow
Affected: 2023 before 2023.1.3
CVE-2023-27913
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow
Affected: 2023 before 2023.1.3
CVE-2023-27912
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read
Affected: 2023 before 2023.1.3
CVE-2022-42938
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-41309
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-41310
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42933
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42934
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42935
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42936
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42937
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42939
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42940
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42941
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42942
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42943
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42944
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2021-40164
7.8
1%
Oct 7
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more
CVE-2021-40166
7.8
1%
Oct 7
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more
CVE-2021-40165
7.8
1%
Oct 7
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC…
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more
CVE-2021-40163
7.8
1%
Oct 7
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more
CVE-2021-40162
7.8
1%
Oct 7
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or…
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2020 before 2020.3.2; 2021 before 2021.1.2; 2021 before 2021.2.2; 2022 before 2022.1.2; +1 more
CVE-2022-33888
7.8
1%
Oct 3
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.3; 2023 before 2023.1.1
Page 1 of 2 · 78 total