Shared Components
Monthly
Out-of-bounds write in Autodesk shared components allows local attackers to execute arbitrary code, corrupt data, or crash the application by crafting a malicious MODEL file. The vulnerability requires user interaction to parse the malicious file and affects multiple Autodesk products with no patch currently available.
Out-of-bounds write in Autodesk products' CATPART file parser enables local attackers to achieve arbitrary code execution, crash the application, or corrupt data when a user opens a malicious file. The vulnerability requires user interaction and affects shared components across multiple Autodesk products. No patch is currently available.
Uncontrolled recursion in Autodesk Shared Components' IFC file parser allows a denial-of-service condition across multiple Autodesk products when a user opens a maliciously crafted IFC file. The recursive processing of specially structured IFC data causes stack exhaustion, terminating the application unexpectedly. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis; vendor patch is available via Autodesk Security Advisory ADSK-SA-2026-0015.
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Out-of-bounds write in Autodesk shared components allows local attackers to execute arbitrary code, corrupt data, or crash the application by crafting a malicious MODEL file. The vulnerability requires user interaction to parse the malicious file and affects multiple Autodesk products with no patch currently available.
Out-of-bounds write in Autodesk products' CATPART file parser enables local attackers to achieve arbitrary code execution, crash the application, or corrupt data when a user opens a malicious file. The vulnerability requires user interaction and affects shared components across multiple Autodesk products. No patch is currently available.
Uncontrolled recursion in Autodesk Shared Components' IFC file parser allows a denial-of-service condition across multiple Autodesk products when a user opens a maliciously crafted IFC file. The recursive processing of specially structured IFC data causes stack exhaustion, terminating the application unexpectedly. No active exploitation has been confirmed and no public exploit code has been identified at time of analysis; vendor patch is available via Autodesk Security Advisory ADSK-SA-2026-0015.
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.