AM
Product
AutoCAD MEP
158
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 150Medium 2Low 1
Watch
Add AutoCAD MEP to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-37004 | 7.8 | Jun 25 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37003 | 7.8 | Jun 25 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-36999 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23159 | 7.8 | Jun 25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23158 | 7.8 | Jun 25 | A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23157 | 7.8 | Jun 25 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23156 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23155 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23154 | 7.8 | Jun 25 | A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23153 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23152 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23151 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23150 | 7.8 | Jun 25 | A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37002 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37001 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37000 | 7.8 | Jun 25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23149 | 7.8 | Jun 25 | A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23148 | 7.8 | Jun 25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23147 | 7.8 | Jun 25 | A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23146 | 7.8 | Jun 25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23145 | 7.8 | Jun 25 | A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23144 | 7.8 | Jun 25 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23143 | 7.8 | Jun 25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23142 | 7.8 | Jun 25 | A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23141 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23140 | 7.8 | Jun 25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23138 | 7.8 | Mar 18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.15; 2024 before 2024.1.3 |
| CVE-2024-23137 | 7.8 | Feb 22 | A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23136 | 7.8 | Feb 22 | A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23135 | 7.8 | Feb 22 | A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23134 | 7.8 | Feb 22 | A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23133 | 7.8 | Feb 22 | A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23132 | 7.8 | Feb 22 | A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23131 | 7.8 | Feb 22 | A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23130 | 7.8 | Feb 22 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23129 | 7.8 | Feb 22 | A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23128 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23127 | 7.8 | Feb 22 | A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23126 | 7.8 | Feb 22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23125 | 7.8 | Feb 22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23124 | 7.8 | Feb 22 | A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23123 | 7.8 | Feb 22 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23122 | 7.8 | Feb 22 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23121 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23120 | 7.8 | Feb 22 | A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-0446 | 7.8 | Feb 22 | A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2023-41140 | 7.8 | Nov 23 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow Affected: before 2023.1.4; 2024.0.0 before 2024.1.1 |
| CVE-2023-41139 | 7.8 | Nov 23 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer Affected: before 2023.1.4; 2024.0.0 before 2024.1.1 |
| CVE-2023-29068 | 7.8 | Jun 27 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-25004 | 7.8 | Jun 27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
