Autodesk Autocad Lt vulnerabilities

CVE-2024-7992 [HIGH] CWE-121 CVE-2024-7992: A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based produ A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2024-9997 [HIGH] CWE-120 CVE-2024-9997: A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

CVE-2024-9996 [HIGH] CWE-787 CVE-2024-9996: A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVE-2024-7305 [HIGH] CWE-787 CVE-2024-7305: A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an O A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

CVE-2024-8896 [HIGH] CWE-908 CVE-2024-8896: A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to acces A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

CVE-2026-11803 [HIGH] CWE-125 CVE-2026-11803: A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-5048 [HIGH] CWE-120 CVE-2025-5048: A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Co A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVE-2022-25789 [HIGH] CWE-416 CVE-2022-25789: A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

CVE-2022-25788 [HIGH] CWE-787 CVE-2022-25788: A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buf A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.

CVE-2022-33886 [HIGH] CWE-755 CVE-2022-33886: A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while p A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. A malicious actor could leverage this v

CVE-2021-40162 [HIGH] CWE-125 CVE-2021-40162: A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be for A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

CVE-2021-40165 [HIGH] CWE-787 CVE-2021-40165: A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be use A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

CVE-2022-27871 [HIGH] CWE-770 CVE-2022-27871: Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.

CVE-2022-33888 [HIGH] CWE-787 CVE-2022-33888: A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memor A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVE-2024-23138 [HIGH] CWE-121 CVE-2024-23138: A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stac A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-1275 [HIGH] CWE-122 CVE-2025-1275: A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can forc A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2023-41139 [HIGH] CWE-822 CVE-2023-41139: A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to der A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

CVE-2025-1656 [HIGH] CWE-122 CVE-2025-1656: A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-1273 [HIGH] CWE-122 CVE-2025-1273: A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CVE-2025-5047 [HIGH] CWE-457 CVE-2025-5047: A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Var A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.