AU
Product
AutoCAD
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 170Medium 2Low 1
Watch
Add AutoCAD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23128 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23127 | 7.8 | Feb 22 | A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23126 | 7.8 | Feb 22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23125 | 7.8 | Feb 22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23124 | 7.8 | Feb 22 | A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23123 | 7.8 | Feb 22 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23122 | 7.8 | Feb 22 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23121 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23120 | 7.8 | Feb 22 | A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-0446 | 7.8 | Feb 22 | A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2023-41140 | 7.8 | Nov 23 | A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow Affected: before 2024.1; 2023.0.0 before 2023.1.4; 2024.0.0 before 2024.1.1 |
| CVE-2023-41139 | 7.8 | Nov 23 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer Affected: before 2024.1; 2023.0.0 before 2023.1.4; 2024.0.0 before 2024.1.1 |
| CVE-2023-29068 | 7.8 | Jun 27 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-25004 | 7.8 | Jun 27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-25003 | 7.8 | Jun 23 | A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2023-29067 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation Affected: 2023 before 2023.1.3 |
| CVE-2023-27915 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation Affected: 2023 before 2023.1.3 |
| CVE-2023-27914 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow Affected: 2023 before 2023.1.3 |
| CVE-2023-27913 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow Affected: 2023 before 2023.1.3 |
| CVE-2023-27912 | 7.8 | Apr 14 | A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read Affected: 2023 before 2023.1.3 |
| CVE-2022-42939 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42944 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42943 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42942 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42941 | 7.8 | Oct 21 | A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42940 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42938 | 7.8 | Oct 21 | A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42937 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42936 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42935 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42934 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-42933 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-41310 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2022-41309 | 7.8 | Oct 21 | A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation Affected: 2019; 2020; 2021; 2022; 2022; 2023 |
| CVE-2021-40164 | 7.8 | Oct 7 | A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40166 | 7.8 | Oct 7 | A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40165 | 7.8 | Oct 7 | A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40163 | 7.8 | Oct 7 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40162 | 7.8 | Oct 7 | A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-33888 | 7.8 | Oct 3 | A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2022-33887 | 7.8 | Oct 3 | A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception Affected: 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2022-33885 | 7.8 | Oct 3 | A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer Affected: 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2022-33889 | 7.8 | Oct 3 | A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer Affected: before 2022.1.3; 2023.0.0 before 2023.1.1 |
| CVE-2022-33890 | 7.8 | Oct 3 | A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation Affected: before 2022.1.3; 2023.0.0 before 2023.1.1 |
| CVE-2022-33886 | 7.8 | Oct 3 | A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022 Affected: 2022 before 2022.1.3; 2023 before 2023.1.1 |
| CVE-2022-33881 | 7.8 | Jul 29 | Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries Affected: 2023 |
| CVE-2022-27871 | 7.8 | Jun 21 | Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing… Affected: 2019; 2020; 2021; 2022; 2022 |
| CVE-2022-27870 | 7.8 | Jun 21 | A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file Affected: 2023 |
| CVE-2022-27869 | 7.8 | Jun 21 | A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file Affected: 2023 |
| CVE-2022-27868 | 7.8 | Jun 21 | A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability Affected: 2023 |
