AP
Product
Autocad Plant 3d
158
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 150Medium 2Low 1
Watch
Add Autocad Plant 3d to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7406 | 7.8 | Aug 6 | BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products Affected: 2027 before 2027.1 |
| CVE-2026-16463 | 7.8 | Jul 29 | DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD Affected: 2026 before 2026.1.2; 2027 |
| CVE-2025-8894 | 7.8 | Sep 16 | A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability Affected: 2024 before 2024.1.8; 2025 before 2025.1.3; 2026 before 2026.1 |
| CVE-2025-8893 | 7.8 | Sep 16 | A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability Affected: 2024 before 2024.1.8; 2025 before 2025.1.3; 2026 before 2026.1 |
| CVE-2025-5048 | 7.8 | Aug 15 | A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability Affected: 2026 |
| CVE-2025-5047 | 7.8 | Aug 15 | A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2026 |
| CVE-2025-5046 | 7.8 | Aug 15 | A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2026 |
| CVE-2025-1276 | 7.8 | Apr 15 | A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1275 | 7.8 | Apr 15 | A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1652 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1651 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1650 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1649 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1433 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1432 | 7.8 | Mar 13 | A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1431 | 7.8 | Mar 13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1430 | 7.8 | Mar 13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1429 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1428 | 7.8 | Mar 13 | A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1427 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2024-9997 | 7.8 | Oct 29 | A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9996 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9827 | 7.8 | Oct 29 | A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9826 | 7.8 | Oct 29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-9489 | 7.8 | Oct 29 | A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8896 | 7.8 | Oct 29 | A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization Affected: 2025 before 2025.1.1 |
| CVE-2024-8600 | 7.8 | Oct 29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8599 | 7.8 | Oct 29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8598 | 7.8 | Oct 29 | A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8597 | 7.8 | Oct 29 | A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8596 | 7.8 | Oct 29 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8595 | 7.8 | Oct 29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8594 | 7.8 | Oct 29 | A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8593 | 7.8 | Oct 29 | A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8592 | 7.8 | Oct 29 | A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability Affected: 2024 before 2024.1.6 |
| CVE-2024-8591 | 7.8 | Oct 29 | A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8590 | 7.8 | Oct 29 | A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8589 | 7.8 | Oct 29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8588 | 7.8 | Oct 29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-7992 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow Affected: 2025 before 2025.1.1 |
| CVE-2024-7991 | 7.8 | Oct 29 | A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability Affected: 2025 before 2025.1.1 |
| CVE-2024-8587 | 7.8 | Oct 29 | A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability Affected: 2025 |
| CVE-2024-7305 | 7.8 | Aug 20 | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.6; 2025 before 2025.1 |
| CVE-2024-37007 | 7.8 | Jun 25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37006 | 7.8 | Jun 25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37005 | 7.8 | Jun 25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37004 | 7.8 | Jun 25 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37003 | 7.8 | Jun 25 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-36999 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23159 | 7.8 | Jun 25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |