AU
Product
AutoCAD
by Autodesk · last CVE Aug 6, 2026
182
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 170Medium 2Low 1
Watch

Add AutoCAD to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-23128
7.8
1%
Feb 22
A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access…
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23127
7.8
1%
Feb 22
A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23126
7.8
0%
Feb 22
A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23125
7.8
0%
Feb 22
A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23124
7.8
1%
Feb 22
A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23123
7.8
1%
Feb 22
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23122
7.8
1%
Feb 22
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23121
7.8
1%
Feb 22
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-23120
7.8
0%
Feb 22
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2024-0446
7.8
0%
Feb 22
A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability
Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1
CVE-2023-41140
7.8
0%
Nov 23
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow
Affected: before 2024.1; 2023.0.0 before 2023.1.4; 2024.0.0 before 2024.1.1
CVE-2023-41139
7.8
0%
Nov 23
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer
Affected: before 2024.1; 2023.0.0 before 2023.1.4; 2024.0.0 before 2024.1.1
CVE-2023-29068
7.8
0%
Jun 27
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-25004
7.8
0%
Jun 27
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-25003
7.8
0%
Jun 23
A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities
Affected: 2020 before 2020.1.6; 2021 before 2021.1.3; 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2023-29067
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation
Affected: 2023 before 2023.1.3
CVE-2023-27915
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation
Affected: 2023 before 2023.1.3
CVE-2023-27914
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow
Affected: 2023 before 2023.1.3
CVE-2023-27913
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow
Affected: 2023 before 2023.1.3
CVE-2023-27912
7.8
0%
Apr 14
A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read
Affected: 2023 before 2023.1.3
CVE-2022-42939
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42944
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42943
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42942
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42941
7.8
0%
Oct 21
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42940
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42938
7.8
0%
Oct 21
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42937
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42936
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42935
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42934
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-42933
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-41310
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2022-41309
7.8
0%
Oct 21
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation
Affected: 2019; 2020; 2021; 2022; 2022; 2023
CVE-2021-40164
7.8
1%
Oct 7
A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2
CVE-2021-40166
7.8
1%
Oct 7
A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2
CVE-2021-40165
7.8
1%
Oct 7
A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC…
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2
CVE-2021-40163
7.8
1%
Oct 7
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2
CVE-2021-40162
7.8
1%
Oct 7
A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or…
Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2
CVE-2022-33888
7.8
1%
Oct 3
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation
Affected: 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2022-33887
7.8
0%
Oct 3
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception
Affected: 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2022-33885
7.8
1%
Oct 3
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer
Affected: 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2022-33889
7.8
0%
Oct 3
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer
Affected: before 2022.1.3; 2023.0.0 before 2023.1.1
CVE-2022-33890
7.8
1%
Oct 3
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation
Affected: before 2022.1.3; 2023.0.0 before 2023.1.1
CVE-2022-33886
7.8
1%
Oct 3
A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022
Affected: 2022 before 2022.1.3; 2023 before 2023.1.1
CVE-2022-33881
7.8
0%
Jul 29
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries
Affected: 2023
CVE-2022-27871
7.8
1%
Jun 21
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing…
Affected: 2019; 2020; 2021; 2022; 2022
CVE-2022-27870
7.8
1%
Jun 21
A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file
Affected: 2023
CVE-2022-27869
7.8
1%
Jun 21
A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file
Affected: 2023
CVE-2022-27868
7.8
1%
Jun 21
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability
Affected: 2023
Page 3 of 4 · 182 total