C3
Product
Civil 3D
98
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 95Medium 2Low 1
Watch
Add Civil 3D to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23144 | 7.8 | Jun 25 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23143 | 7.8 | Jun 25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23142 | 7.8 | Jun 25 | A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23141 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23140 | 7.8 | Jun 25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23138 | 7.8 | Mar 18 | A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3 |
| CVE-2024-23137 | 7.8 | Feb 22 | A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23136 | 7.8 | Feb 22 | A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23135 | 7.8 | Feb 22 | A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23134 | 7.8 | Feb 22 | A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23133 | 7.8 | Feb 22 | A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23132 | 7.8 | Feb 22 | A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23131 | 7.8 | Feb 22 | A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23130 | 7.8 | Feb 22 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23129 | 7.8 | Feb 22 | A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23128 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23127 | 7.8 | Feb 22 | A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23126 | 7.8 | Feb 22 | A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23125 | 7.8 | Feb 22 | A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23124 | 7.8 | Feb 22 | A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23123 | 7.8 | Feb 22 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23122 | 7.8 | Feb 22 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23121 | 7.8 | Feb 22 | A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-23120 | 7.8 | Feb 22 | A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2024-0446 | 7.8 | Feb 22 | A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2021 before 2021.1.4; 2022 before 2022.1.4; 2023 before 2023.1.5; 2024 before 2024.1.3; 2025 before 2025.0.1 |
| CVE-2022-25788 | 7.8 | Apr 19 | A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files Affected: 2022 before 2022.1.2 |
| CVE-2022-27530 | 7.8 | Apr 18 | A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-27529 | 7.8 | Apr 18 | A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-25792 | 7.8 | Apr 11 | A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-25791 | 7.8 | Apr 11 | A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-25790 | 7.8 | Apr 11 | A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF… Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2022-25789 | 7.8 | Apr 11 | A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability Affected: 2019 before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40158 | 7.8 | Jan 25 | A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file Affected: 2022 before 2022.1.2 |
| CVE-2021-40159 | 7.8 | Jan 25 | An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through… Affected: 2022 before 2022.1.2 |
| CVE-2021-40161 | 7.8 | Dec 23 | A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version Affected: before 2019.1.4; 2020 before 2020.1.5; 2021 before 2021.1.2; 2022 before 2022.1.2 |
| CVE-2021-40160 | 7.8 | Dec 23 | PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file Affected: 2022 before 2022.1.1 |
| CVE-2021-27043 | 7.8 | Jun 25 | An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2021-27042 | 7.8 | Jun 25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2021-27041 | 7.8 | Jun 25 | A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
| CVE-2019-7364 | 7.8 | Aug 23 | DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD Architecture, AutoCAD Electrical, AutoCAD… Affected: 2017; 2018; 2019; 2020 |
| CVE-2019-7361 | 7.8 | Apr 9 | An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code execution in Autodesk Advance Steel 2018,… Affected: 2018 |
| CVE-2019-7360 | 7.8 | Apr 9 | An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2019-7359 | 7.8 | Apr 9 | An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2019-7358 | 7.8 | Apr 9 | An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk… Affected: 2018 |
| CVE-2026-16465 | 7.1 | Jul 29 | DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD Affected: 2026 before 2026.1.2; 2027 |
| CVE-2026-7405 | 5.5 | Aug 6 | TIF File Parsing Out-of-Bounds Read in certain Autodesk products Affected: 2027 before 2027.1 |
| CVE-2026-17550 | 5.5 | Jul 29 | DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD Affected: 2026 before 2026.1.2; 2027 |
| CVE-2021-27040 | 3.3 | Jun 25 | A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file Affected: 2019 before 2019.1.3; 2020 before 2020.1.4; 2021 before 2021.1.1; 2022 before 2022.0.1 |
