Autodesk Dwg Trueview vulnerabilities

CVE-2013-3665 [MEDIUM] CVE-2013-3665: Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueVie Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file.

CVE-2022-25797 [HIGH] CWE-787 CVE-2022-25797: A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.

CVE-2021-27043 [HIGH] CWE-787 CVE-2021-27043: An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to lever An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in unexpected paths. In order to exploit this the attacker would need the victim to enable full page heap in the application.

CVE-2022-42945 [HIGH] CWE-427 CVE-2022-42945: DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system.

CVE-2022-27523 [HIGH] CWE-125 CVE-2022-27523: A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive i A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVE-2022-27524 [HIGH] CWE-125 CVE-2022-27524: An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitiv An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

CVE-2026-16465 [HIGH] CWE-125 CVE-2026-16465: A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bou A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.

CVE-2026-17550 [MEDIUM] CWE-125 CVE-2026-17550: A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bou A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.

CVE-2026-7405 [MEDIUM] CWE-125 CVE-2026-7405: A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, c A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service

CVE-2021-27040 [LOW] CWE-125 CVE-2021-27040: A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DW A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be exploited to execute arbitrary code.