CVE-2025-5038

CVE-2025-5038 involves a memory corruption vulnerability in Autodesk products triggered by parsing specially crafted X_T files. Reported impacts indicate arbitrary code execution in the current process, with a local attack vector and required user interaction. Connected sources (Autodesk security...

CVE-2025-5038 X_T File Parsing Memory Corruption Vulnerability

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2025-5038 X_T File Parsing Memory Corruption Vulnerability

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Autodesk多款产品 安全漏洞

Autodesk Advance Steel and others are products of Autodesk, Inc. of the U.S. Autodesk Advance Steel is a suite of 3D modeling software for structural analysis of steel reinforcement.Autodesk AutoCAD is a suite of professional 3D drafting software.Autodesk Civil 3D is a suite of building informati...

CVE-2025-5038: Buffer Copy without Checking Size of Input

A maliciously crafted XT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

Autodesk AutoCAD X_T File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of XT...

CVE-2024-32637

A vulnerability has been identified in JT2Go All versions V2312.0005, Teamcenter Visualization V14.2 All versions V14.2.0.12, Teamcenter Visualization V14.3 All versions V14.3.0.10, Teamcenter Visualization V2312 All versions V2312.0005. The affected applications contain a null pointer dereferenc...

CVE-2023-38529

A vulnerability has been identified in Parasolid V34.1 All versions V34.1.258, Parasolid V35.0 All versions V35.0.254, Parasolid V35.1 All versions V35.1.184, Teamcenter Visualization V14.1 All versions, Teamcenter Visualization V14.2 All versions V14.2.0.12, Teamcenter Visualization V14.3 All...

CVE-2023-41032

A vulnerability has been identified in Parasolid V34.1 All versions V34.1.258, Parasolid V35.0 All versions V35.0.253, Parasolid V35.1 All versions V35.1.184, Parasolid V36.0 All versions V36.0.142, Simcenter Femap V2301 All versions V2301.0003, Simcenter Femap V2306 All versions V2306.0001. The...

CVE-2023-38532

A vulnerability has been identified in Parasolid V34.1 All versions V34.1.258, Parasolid V35.0 All versions V35.0.254, Parasolid V35.1 All versions V35.1.171, Teamcenter Visualization V14.1 All versions V14.1.0.11, Teamcenter Visualization V14.2 All versions V14.2.0.6, Teamcenter Visualization...

CVE-2022-39142

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39137

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.262, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.161, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. Th...

CVE-2022-39145

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application is vulnerable to out of bounds read past the end of an allocated buffer...

CVE-2022-39143

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39148

A vulnerability has been identified in Parasolid V33.1 All versions = V33.1.262 = V35.0.161 V35.0.164, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-39140

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.262, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.161, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. Th...

CVE-2022-39139

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.262, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.161, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. Th...

CVE-2022-34748

A vulnerability has been identified in Simcenter Femap All versions V2022.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted XT files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-43397

A vulnerability has been identified in Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Simcenter Femap All versions V2023.1. The affected application contains an out of bounds write past the end of an allocated buffer while...

CVE-2022-40654

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ansys SpaceClaim 2022 R1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...