Autodesk Autocad vulnerabilities
182 known vulnerabilities affecting autodesk/autocad.
Total CVEs
182
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL4HIGH171MEDIUM6LOW1
Vulnerabilities
Page 2 of 10
CVE-2026-7406P3HIGHCVSS 7.8≥ 2027, < 2027.1≥ 2027.0.0, < 2027.1.0+1 more2026-08-06
CVE-2026-7406 [HIGH] CWE-822 CVE-2026-7406: A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
nvd
CVE-2025-7675P3HIGHCVSS 7.8≥ 2025, < 2025.1.3≥ 2024, < 2024.1.8+1 more2025-07-29
CVE-2025-7675 [HIGH] CWE-787 CVE-2025-7675: A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-B
A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2025-8893P3HIGHCVSS 7.8≥ 2024, < 2024.1.8≥ 2025, < 2025.1.3+2 more2025-09-16
CVE-2025-8893 [HIGH] CWE-787 CVE-2025-8893: A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-B
A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2021-27042P3HIGHCVSS 7.8≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4+2 more2021-06-25
CVE-2021-27042 [HIGH] CWE-755 CVE-2021-27042: A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG fi
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because the application fails to handle a crafted DWG file, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
nvd
CVE-2021-27041P3HIGHCVSS 7.8≥ 2019, < 2019.1.3≥ 2020, < 2020.1.4+2 more2021-06-25
CVE-2021-27041 [HIGH] CWE-787 CVE-2021-27041: A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG fi
A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be exploited to execute arbitrary code
nvd
CVE-2024-23122P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-23122 [HIGH] CWE-787 CVE-2024-23122: A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23123P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-23123 [HIGH] CWE-787 CVE-2024-23123: A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk A
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23121P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-23121 [HIGH] CWE-787 CVE-2024-23121: A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force a
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23124P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-23124 [HIGH] CWE-787 CVE-2024-23124: A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force
A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23120P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-23120 [HIGH] CWE-787 CVE-2024-23120: A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll thro
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-0446P3HIGHCVSS 7.8≥ 2021, < 2021.1.4≥ 2022, < 2022.1.4+3 more2024-02-22
CVE-2024-0446 [HIGH] CWE-787 CVE-2024-0446: A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dl
A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23144P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23144 [HIGH] CWE-787 CVE-2024-23144: A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk A
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23146P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23146 [HIGH] CWE-787 CVE-2024-23146: A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD
A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23143P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23143 [HIGH] CWE-125 CVE-2024-23143: A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll th
A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23151P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23151 [HIGH] CWE-787 CVE-2024-23151: A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force a
A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23154P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23154 [HIGH] CWE-122 CVE-2024-23154: A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can b
A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-37001P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-37001 [HIGH] CWE-122 CVE-2024-37001: A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be u
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2024-23150P3HIGHCVSS 7.8≥ 2022, < 2022.1.5≥ 2023, < 2023.1.6+2 more2024-06-25
CVE-2024-23150 [HIGH] CWE-787 CVE-2024-23150: A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an
A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
nvd
CVE-2025-1432P3HIGHCVSS 7.8≥ 2022, < 2022.1.6≥ 2023, < 2023.1.7+2 more2025-03-13
CVE-2025-1432 [HIGH] CWE-416 CVE-2025-1432: A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vul
A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd
CVE-2023-41140P3HIGHCVSS 7.8fixed in 2024.1≥ 2023.0.0, < 2023.1.4+1 more2023-11-23
CVE-2023-41140 [HIGH] CWE-122 CVE-2023-41140: A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cau
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
nvd