Skip to main content

Autocad Map 3D

126 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2026-7406 Aug 06, 22:18 HIGH PATCH This Week

Untrusted pointer dereference in Autodesk products' BMP file parser enables arbitrary code execution in the context of the current process. An attacker who can convince a user to open a specially crafted BMP file gains full code execution capability (C:H/I:H/A:H). No public exploit code has been identified at time of analysis, and CISA KEV does not list active exploitation, but the high CVSS score and confirmed RCE impact make patching a clear priority for Autodesk-heavy environments. Vendor advisory ADSK-SA-2026-0012 is the authoritative source.

RCE Revit Autocad Autocad Architecture Autocad Electrical +9
NVD VulDB
CVSS 3.1
7.8
EPSS
0.1%
CVE-2026-7405 Aug 06, 22:18 MEDIUM PATCH This Month

Out-of-Bounds Read in Autodesk's image handling library crashes Revit and AutoCAD when a user opens a maliciously crafted TIF file during image import. Affected products span Revit 2024, 2026, and 2027 as well as AutoCAD and AutoCAD LT 2027, all below vendor-specified fix versions. The attack is local and requires user interaction, limiting automated mass exploitation, but remains a viable denial-of-service vector in targeted scenarios against AEC professionals who routinely handle externally sourced CAD assets. No public exploit identified at time of analysis.

Buffer Overflow Denial Of Service Information Disclosure Revit Autocad +11
NVD VulDB
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-8894 Sep 16, 15:15 HIGH This Month

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Revit +11
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-8893 Sep 16, 15:15 HIGH This Month

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Revit Autocad +10
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-5048 Aug 15, 15:15 HIGH This Month

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +8
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-5047 Aug 15, 15:15 HIGH This Week

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad Autocad Architecture Autocad Electrical +8
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-5046 Aug 15, 15:15 HIGH This Week

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.0%
CVE-2025-1276 Apr 15, 21:15 HIGH This Week

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Revit Autocad +16
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1275 Apr 15, 21:15 HIGH This Week

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Revit +12
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1652 Mar 13, 17:15 HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1651 Mar 13, 17:15 HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1650 Mar 13, 17:15 HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1649 Mar 13, 17:15 HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1433 Mar 13, 17:15 HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1432 Mar 13, 17:15 HIGH This Week

A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Use After Free Memory Corruption Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1431 Mar 13, 17:15 HIGH This Week

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1430 Mar 13, 17:15 HIGH This Week

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1429 Mar 13, 17:15 HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1428 Mar 13, 17:15 HIGH This Week

A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2025-1427 Mar 13, 17:15 HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2024-7305 Aug 20, 00:15 HIGH This Week

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2024-37007 Jun 25, 04:15 HIGH This Week

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37006 Jun 25, 04:15 HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37005 Jun 25, 04:15 HIGH This Week

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37004 Jun 25, 04:15 HIGH This Week

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37003 Jun 25, 04:15 HIGH This Week

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Stack Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-36999 Jun 25, 04:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23159 Jun 25, 04:15 HIGH This Week

A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +6
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-23158 Jun 25, 04:15 HIGH This Week

A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23157 Jun 25, 04:15 HIGH This Week

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23156 Jun 25, 04:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23155 Jun 25, 04:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23154 Jun 25, 04:15 HIGH This Week

A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23153 Jun 25, 04:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23152 Jun 25, 04:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23151 Jun 25, 04:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23150 Jun 25, 04:15 HIGH This Week

A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37002 Jun 25, 03:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +6
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37001 Jun 25, 03:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-37000 Jun 25, 03:15 HIGH This Week

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23149 Jun 25, 03:15 HIGH This Week

A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23148 Jun 25, 03:15 HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-23147 Jun 25, 03:15 HIGH This Week

A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23146 Jun 25, 03:15 HIGH This Week

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23145 Jun 25, 03:15 HIGH This Week

A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23144 Jun 25, 02:15 HIGH This Week

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23143 Jun 25, 02:15 HIGH This Week

A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23142 Jun 25, 02:15 HIGH This Week

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23141 Jun 25, 02:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +6
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23140 Jun 25, 02:15 HIGH This Week

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23138 Mar 18, 00:15 HIGH This Week

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Stack Overflow Autocad +11
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23137 Feb 22, 05:15 HIGH This Week

A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +6
NVD
CVSS 3.1
7.8
EPSS
1.0%
CVE-2024-23136 Feb 22, 05:15 HIGH This Week

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +6
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23135 Feb 22, 05:15 HIGH This Week

A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23134 Feb 22, 05:15 HIGH This Week

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23133 Feb 22, 04:15 HIGH This Week

A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2024-23132 Feb 22, 04:15 HIGH This Week

A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2024-23131 Feb 22, 04:15 HIGH This Week

A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23130 Feb 22, 04:15 HIGH This Week

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23129 Feb 22, 04:15 HIGH This Week

A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23128 Feb 22, 04:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +7
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23127 Feb 22, 03:15 HIGH This Week

A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-23126 Feb 22, 03:15 HIGH This Week

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Stack Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23125 Feb 22, 03:15 HIGH This Week

A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Stack Overflow Autocad +9
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2024-23124 Feb 22, 03:15 HIGH This Week

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2024-23123 Feb 22, 02:15 HIGH This Week

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2024-23122 Feb 22, 02:15 HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.7%
CVE-2024-23121 Feb 22, 02:15 HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.6%
CVE-2024-23120 Feb 22, 00:15 HIGH This Week

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2024-0446 Feb 22, 00:15 HIGH This Week

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +8
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2023-41140 Nov 23, 04:15 HIGH This Week

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +10
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-41139 Nov 23, 04:15 HIGH This Week

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture Autocad Electrical Autocad Mechanical +7
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-29076 Nov 23, 04:15 CRITICAL Act Now

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad Autocad Architecture Autocad Electrical +8
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-29075 Nov 23, 04:15 CRITICAL Act Now

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Memory Corruption Autocad +10
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-29074 Nov 23, 04:15 CRITICAL Act Now

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Memory Corruption Autocad +10
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-29073 Nov 23, 03:15 CRITICAL Act Now

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Heap Overflow Autocad +10
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-29068 Jun 27, 19:15 HIGH This Week

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Revit Autocad +16
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-25004 Jun 27, 19:15 HIGH This Week

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Revit Autocad Autocad Architecture +15
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-25003 Jun 23, 19:15 HIGH This Week

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Revit Autocad +16
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-29067 Apr 14, 19:15 HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2023-27915 Apr 14, 19:15 HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27914 Apr 14, 19:15 HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Memory Corruption Autocad +10
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27913 Apr 14, 19:15 HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Integer Overflow Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2023-27912 Apr 14, 19:15 HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Autocad Autocad Architecture +9
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-42944 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42943 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42942 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42941 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42940 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42939 Oct 21, 16:15 HIGH PATCH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption Autocad Autocad Architecture +10
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2026-7406
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Untrusted pointer dereference in Autodesk products' BMP file parser enables arbitrary code execution in the context of the current process. An attacker who can convince a user to open a specially crafted BMP file gains full code execution capability (C:H/I:H/A:H). No public exploit code has been identified at time of analysis, and CISA KEV does not list active exploitation, but the high CVSS score and confirmed RCE impact make patching a clear priority for Autodesk-heavy environments. Vendor advisory ADSK-SA-2026-0012 is the authoritative source.

RCE Revit Autocad +11
NVD VulDB
CVE-2026-7405
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

Out-of-Bounds Read in Autodesk's image handling library crashes Revit and AutoCAD when a user opens a maliciously crafted TIF file during image import. Affected products span Revit 2024, 2026, and 2027 as well as AutoCAD and AutoCAD LT 2027, all below vendor-specified fix versions. The attack is local and requires user interaction, limiting automated mass exploitation, but remains a viable denial-of-service vector in targeted scenarios against AEC professionals who routinely handle externally sourced CAD assets. No public exploit identified at time of analysis.

Buffer Overflow Denial Of Service Information Disclosure +13
NVD VulDB
CVE-2025-8894
EPSS 0% CVSS 7.8
HIGH This Month

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +13
NVD
CVE-2025-8893
EPSS 0% CVSS 7.8
HIGH This Month

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +12
NVD
CVE-2025-5048
EPSS 0% CVSS 7.8
HIGH This Month

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +10
NVD
CVE-2025-5047
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad +10
NVD
CVE-2025-5046
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2025-1276
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +18
NVD
CVE-2025-1275
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +14
NVD
CVE-2025-1652
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2025-1651
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2025-1650
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad +9
NVD
CVE-2025-1649
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad +9
NVD
CVE-2025-1433
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2025-1432
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Use After Free +11
NVD
CVE-2025-1431
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2025-1430
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2025-1429
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2025-1428
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2025-1427
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Autocad +9
NVD
CVE-2024-7305
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +12
NVD
CVE-2024-37007
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-37006
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-37005
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-37004
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-37003
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-36999
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23159
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +8
NVD
CVE-2024-23158
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-23157
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23156
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23155
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow +10
NVD
CVE-2024-23154
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-23153
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23152
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23151
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23150
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-37002
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +8
NVD
CVE-2024-37001
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-37000
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23149
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23148
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23147
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23146
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23145
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23144
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23143
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23142
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-23141
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +8
NVD
CVE-2024-23140
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +10
NVD
CVE-2024-23138
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +13
NVD
CVE-2024-23137
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +8
NVD
CVE-2024-23136
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +8
NVD
CVE-2024-23135
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-23134
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption +10
NVD
CVE-2024-23133
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23132
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23131
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23130
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23129
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23128
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +9
NVD
CVE-2024-23127
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-23126
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-23125
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2024-23124
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23123
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23122
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23121
EPSS 1% CVSS 7.8
HIGH This Week

A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-23120
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2024-0446
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +10
NVD
CVE-2023-41140
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +12
NVD
CVE-2023-41139
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

RCE Autocad Autocad Architecture +9
NVD
CVE-2023-29076
EPSS 1% CVSS 9.8
CRITICAL Act Now

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Autocad +10
NVD
CVE-2023-29075
EPSS 1% CVSS 9.8
CRITICAL Act Now

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +12
NVD
CVE-2023-29074
EPSS 1% CVSS 9.8
CRITICAL Act Now

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +12
NVD
CVE-2023-29073
EPSS 1% CVSS 9.8
CRITICAL Act Now

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +12
NVD
CVE-2023-29068
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +18
NVD
CVE-2023-25004
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Integer Overflow Revit +17
NVD
CVE-2023-25003
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +18
NVD
CVE-2023-29067
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +11
NVD
CVE-2023-27915
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +11
NVD
CVE-2023-27914
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +12
NVD
CVE-2023-27913
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Information Disclosure Integer Overflow +11
NVD
CVE-2023-27912
EPSS 0% CVSS 7.8
HIGH This Week

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +11
NVD
CVE-2022-42944
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
CVE-2022-42943
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
CVE-2022-42942
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
CVE-2022-42941
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
CVE-2022-42940
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
CVE-2022-42939
EPSS 0% CVSS 7.8
HIGH PATCH This Week

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

RCE Buffer Overflow Memory Corruption +12
NVD VulDB
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy