Vulnerabilities (CVE)

Filtered by vendor Autodesk Subscribe
Total 290 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-8589 2 Autodesk, Microsoft 9 Autocad, Autocad Advance Steel, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-8588 2 Autodesk, Microsoft 9 Autocad, Autocad Advance Steel, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-7992 1 Autodesk 10 Autocad, Autocad Advance Steel, Autocad Architecture and 7 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-7991 1 Autodesk 10 Autocad, Autocad Advance Steel, Autocad Architecture and 7 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-0446 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23120 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23121 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23122 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23123 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23124 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVE-2024-23126 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-23125 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-23127 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2024-23128 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
CVE-2024-23129 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
CVE-2024-23130 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
CVE-2024-23131 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
CVE-2024-23132 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2024-23133 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2024-23134 1 Autodesk 9 Advance Steel, Autocad, Autocad Architecture and 6 more 2025-04-11 N/A 7.8 HIGH
A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.