CVE-2024-23124

The CVE-2024-23124 issue affects Autodesk AutoCAD via ASMIMPORT228A.dll when parsing STP files, causing an Out-of-Bounds Write that can crash, corrupt data, or allow arbitrary code execution in the current process. Public sources (e.g., ZDI) describe this as a remote code execution vulnerability ...

CVE-2024-23127

Autodesk CVE-2024-23127 affects AutoCAD via parsing MODEL/SLDPRT/SLDASM files, triggering a heap-based overflow in ODXSW_DLL.dll and libodxdll.dll. The vulnerability can allow a crash, data leakage of sensitive information, or arbitrary code execution in the current process. Exploitation context ...

CVE-2024-23126

CVE-2024-23126 affects Autodesk AutoCAD through CC5Dll.dll when parsing CATPART files, causing a stack-based overflow. The description and multiple sources indicate exploitation can crash the process, read sensitive data, or execute arbitrary code in the context of the current process. A ZDI advi...

CVE-2024-23134

CVE-2024-23134 corresponds to a use-after-free in Autodesk AutoCAD triggered by parsing a malicious IGS file (tbb.dll). Multiple connected sources (ZDI advisory, Red Hat, NVD, CVE lists) confirm remote code execution potential when an affected IGS file is opened or viewed, with user interaction o...

CVE-2024-23133

CVE-2024-23133 affects Autodesk AutoCAD Desktop Software due to a vulnerability in parsing a malicious STP file (ASMDATAX228A.dll). The issue is described as a memory corruption via a write access violation, and, in combination with other vulnerabilities, could lead to code execution in the conte...

CVE-2024-23130

Summary (CVE-2024-23130): A memory corruption vulnerability arises when parsing malicious SLDASM or SLDPRT files in Autodesk applications via ODXSW_DLL.dll, potentially enabling code execution in the current process. The issue is described across multiple advisories (notably ZDI reports for Autod...

CVE-2024-23135

Autodesk AutoCAD is affected by a use-after-free in parsing SLDPRT files within ASMkern228A.dll, enabling code execution in the current process. Several sources describe CVE-2024-23135 as a remote code execution vulnerability exploitable via a malicious SLDPRT file; one advisory notes that user i...

CVE-2024-23137

Autodesk AutoCAD contains CVE-2024-23137: a maliciously crafted STP or SLDPRT file processed by ODXSW_DLL.dll can cause uninitialized memory access, enabling code execution in the current process. Multiple related advisories (including ZDI-24-745 and RH notices) describe this as a parsing/initial...

CVE-2024-23129

CVE-2024-23129 describes a memory corruption vulnerability in Autodesk AutoCAD when parsing certain 3D model files (3DM, STP, SLDASM) via opennurbs.dll. The root cause is a write access violation during file parsing, which, in the context of the current process, could lead to code execution. Publ...

CVE-2024-23131

Autodesk AutoCAD STP file parsing memory corruption vulnerability leading to remote code execution. The issue occurs when parsing STP files, with the memory corruption exploitable to run code in the current process. Descriptions from ZDI advisories confirm a remote code execution condition requir...

CVE-2024-23128

CVE-2024-23128 relates to Autodesk AutoCAD: parsing of MODEL files in libodxdll.dll and ASMDATAX229A.dll can trigger a memory corruption via write access violation, potentially enabling code execution in the current process. Connected sources (ZDI advisories) describe remote code execution with m...

CVE-2024-23136

Autodesk AutoCAD is affected by CVE-2024-23136 due to a malicious STP file parsed by ASMKERN228A.dll that can cause a dereference of an untrusted pointer, potentially enabling code execution in the current process. The CVSS indicates local access, no privileges required, user interaction required...

CVE-2024-23123

CVE-2024-23123 affects Autodesk AutoCAD when parsing CATPART files via CC5Dll.dll and ASMBASE228A.dll. The vulnerability is an out-of-bounds write in the parsing path, which can lead to a crash, data corruption, or execution of arbitrary code in the context of the current process. Exploitation co...

CVE-2024-23132

CVE-2024-23132 concerns Autodesk AutoCAD desktop software. A maliciously crafted STP file is processed by the atf_dwg_consumer.dll library, causing a memory corruption via a write-access violation. In the context of the current process, this can lead to code execution. Multiple sources corroborat...

CVE-2024-23122

Summary: CVE-2024-23122 affects Autodesk AutoCAD via parsing of malicious 3DM files in opennurbs.dll, causing an Out-of-Bounds Write. This can crash the process, corrupt data, or allow arbitrary code execution in the current process. Exploitation details in connected sources indicate remote code ...

CVE-2024-23121

CVE-2024-23121 relates to Autodesk AutoCAD, where parsing of a malicious MODEL file via the libodxdll.dll component can trigger an out-of-bounds write. This vulnerability may allow a locally or remotely processed attack to crash, corrupt data, or execute arbitrary code within the caller’s process...

CVE-2024-23125

CVE-2024-23125 : The provided connected documents confirm a vulnerability in Autodesk AutoCAD where parsing a malicious SLDPRT file via the ODXSW_DLL.dll component triggers a stack-based overflow. The impact as stated is a crash, potential data exposure, or arbitrary code execution in the affecte...

CVE-2019-7364

CVE-2019-7364 describes a DLL preloading vulnerability in Autodesk products (2017–2020 Autodesk Advanced Steel, Civil 3D, AutoCAD and related tools; plus AutoCAD P&ID 2017). The issue allows an attacker to cause code execution by persuading a user to open a malicious DWG file that leverages the D...

CVE-2024-0446

This CVE (CVE-2024-0446) affects Autodesk AutoCAD parsing of STP/CATPART/MODEL files via ASMKERN228A.dll and ASMdatax229A.dll, causing an Out-of-Bounds Write with potential crash, data corruption, or arbitrary code execution in the current process. The issue is triggered by parsing crafted files ...

CVE-2024-23142

CVE-2024-23142 describes memory corruption via parsing CATPART/STP/MODEL files in Autodesk AutoCAD, leading to use-after-free and potential code execution in the affected process. Public references indicate the issue arises when these files are processed by components such as atf_dwg_consumer.dll...

CVE-2024-7305

CVE-2024-7305 describes an Out-of-Bounds Write in AdDwfPdk.dll when parsing DWF files in Autodesk AutoCAD. The vulnerability arises in the DWF file handling code and can lead to a crash, data corruption, or arbitrary code execution in the context of the affected process. Evidence from multiple so...

CVE-2022-25792

CVE-2022-25792 is a buffer overflow in DXF file parsing affecting Autodesk AutoCAD (2022, 2021, 2020, 2019) and Autodesk Navisworks 2022. The issue arises from writing beyond an allocated buffer when processing a malicious DXF file, allowing arbitrary code execution. Connected documents corrobora...

CVE-2025-1427

Autodesk AutoCAD is affected by CVE-2025-1427 due to an Uninitialized Variable vulnerability when parsing a malicious CATPRODUCT file. Root cause: uninitialized variable in CATPRODUCT parsing. Impact: crash, read sensitive data, or execute arbitrary code in the current process. Exploitation is lo...

CVE-2022-25791

The CVE-2022-25791 entry describes a memory corruption vulnerability in Autodesk products (AutoCAD 2022/2021/2020/2019 and Navisworks 2022) that can lead to code execution via maliciously crafted DWF/DWFX/DWF parsing. Connected sources specify the flaw arises from parsing of DWF/DWFX/DWF files an...

CVE-2024-23120

CVE-2024-23120 (and related entries) describe a vulnerability in Autodesk AutoCAD where parsing malicious STP/STEP files via ASMIMPORT228A.dll and ASMIMPORT229A.dll can cause an Out-of-Bounds Write. The weakness is triggered during file parsing of STP/STEP content, potentially leading to a crash,...

CVE-2022-25789

Autodesk AutoCAD is affected by a use-after-free vulnerability triggered by parsing certain file formats (DWF, DWFX, 3DS) in several versions (2022, 2021, 2020, 2019). The issue stems from unsafe handling in the file-parsing code, allowing potential remote code execution. Several connected adviso...

CVE-2022-27530

CVE-2022-27530 affects Autodesk AutoCAD 2019–2022. The issue is a buffer overflow triggered by malicious TIF/PICT files, allowing arbitrary code execution. Public details confirm the vulnerable component is related to image/file handling, with impact on confidentiality, integrity, and availabilit...

CVE-2022-25790

CVE-2022-25790 describes a vulnerability in Autodesk products (Autodesk AutoCAD 2022/2021/2020/2019 and Autodesk Navisworks 2022) where parsing of DWF files can write beyond allocated boundaries, potentially enabling code execution. Connected sources (ZDI advisories) corroborate an out-of-bounds ...

CVE-2021-27040

CVE-2021-27040 is an out-of-bounds read in the DWG file parsing path that affects ICONICS GENESIS64 (and related components) when importing DWG data. Root cause described across sources as improper validation of user-supplied data leading to reading past allocated buffers, enabling potential arbi...

CVE-2024-37004

CVE-2024-37004 concerns Autodesk AutoCAD. What’s affected: AutoCAD desktop software; vulnerable code path occurs when parsing an SLDPRT file via the ASMKERN229A.dll module. Root cause: a use-after-free vulnerability in that parsing flow, as documented in the CVE description and corroborated by cr...

CVE-2021-40158

The CVE-2021-40158 entry maps to multiple ZDI advisories describing Autodesk AutoCAD JT file parsing vulnerabilities that can trigger out-of-bounds writes/reads and remote code execution. Affected product: Autodesk AutoCAD (JT file parsing path). Root cause: crafted JT data triggers boundary viol...

CVE-2022-25788

Autodesk AutoCAD 2022 is affected by CVE-2022-25788 through its JT file parser. The issue is a memory/stack-based buffer overflow caused by insufficient validation of JT data length before copying into a stack buffer, enabling arbitrary code execution. Several connected sources describe remote co...

CVE-2025-1651

CVE-2025-1651 concerns Autodesk AutoCAD and a vulnerability in parsing a malicious MODEL file that can trigger a Heap-Based Overflow. Affected component: MODEL file parsing in AutoCAD. Root cause: heap overflow during processing of a crafted MODEL file, enabling crash, potential information discl...

CVE-2025-1649

CVE-2025-1649 concerns Autodesk AutoCAD and the CATPRODUCT file type. A maliciously crafted CATPRODUCT file may be parsed in AutoCAD to trigger an Uninitialized Variable condition, potentially allowing a crash, data exposure, or arbitrary code execution in the current process. Affected behavior i...

CVE-2021-27041

CVE-2021-27041 affects Autodesk AutoCAD DWG file parsing. The flaw is an out-of-bounds write resulting from insufficient validation while parsing DWG data, allowing arbitrary code execution. Exploitation vectors involve opening a malicious DWG file (user interaction may be required per sources). ...

CVE-2021-40161

Summary (CVE-2021-40161) : The issue affects PDFTron software; memory corruption can enable remote code execution when processing PDFs containing malicious DLL references. Root cause is errors in the mechanism that checks the path to dynamically loaded libraries (DLLs). Affected products are PDFT...

CVE-2024-37003

Summary of CVE-2024-37003 : A maliciously crafted DWG/SLDPRT file can be parsed by Autodesk AutoCAD components, specifically opennurbs.dll and ODXSW_DLL.dll, causing a stack-based overflow. This can lead to a crash, potential data exposure, or arbitrary code execution in the context of the affect...

CVE-2021-27043

CVE-2021-27043 affects Autodesk DWG/AutoCAD components due to an Arbitrary Address Write vulnerability. The issue allows writing to unexpected paths caused by memory corruption, with exploitation described as requiring the victim to enable full page heap in the application. Public references from...

CVE-2022-27529

CVE-2022-27529 affects Autodesk AutoCAD 2019–2022, where parsing malicious PICT/BMP/PSD/TIF files can write beyond allocated buffers, enabling arbitrary code execution. Root cause: buffer overrun during image format parsing. Public details confirm impact as arbitrary code execution; exploitation ...

CVE-2024-37001

Summary (CVE-2024-37001) : A heap-based overflow in opennurbs.dll when parsing 3DM files through Autodesk AutoCAD can crash the process, read sensitive data, or allow arbitrary code execution. Connected sources attribute this to a boundary/length-check issue in 3DM parsing and identify AutoCAD (d...

CVE-2021-40159

CVE-2021-40159 affects Autodesk Inventor (JT file parsing) and can lead to remote code execution via crafted JT files. Public details from ZDI advisories describe use-after-free and stack-buffer issues in JT file parsing that allow code execution in the current process, often requiring user inter...

CVE-2024-37000

Autodesk AutoCAD contains a memory-corruption vulnerability (CVE-2024-37000) in the pskernel.DLL when parsing X_B files, leading to code execution in the current process. Affected: AutoCAD desktop software; vulnerable component: pskernel.DLL; trigger: parsing malicious X_B (and related X_B/X_T) f...

CVE-2025-1275

The CVE-2025-1275 entry concerns a heap-based overflow in JPG parsing when linked or imported into Autodesk applications. The vulnerability affects Autodesk products using JPG handling in affected workflows (e.g., AutoCAD/Revit-related components) and can allow a malicious actor to crash the appl...

CVE-2025-1276

CVE-2025-1276 : A maliciously crafted DWG file, when parsed by Autodesk applications, can trigger an Out-of-Bounds Write vulnerability. Impacted behavior includes a crash, data corruption, or arbitrary code execution in the context of the affected process. The root cause is an out-of-bounds write...

CVE-2024-23141

Autodesk AutoCAD is affected by CVE-2024-23141 due to parsing of a malicious MODEL file in libodxdll, which can cause a double-free and enable code execution in the current process. The CVSSv3.1 base score is 7.8 (HIGH) with Local attack, no privileges required, but user interaction needed; impac...

CVE-2024-23149

CVE-2024-23149 affects Autodesk AutoCAD and involves parsing malicious SLDDRW files in the ODXSW_DLL.dll library. The vulnerability causes an Out-of-Bounds Read, leading to a crash, potential data exposure, or arbitrary code execution in the current process. Public details indicate the issue stem...

CVE-2025-1430

CVE-2025-1430 : A memory corruption vulnerability in Autodesk AutoCAD when parsing SLDPRT files could allow arbitrary code execution in the current process. The issue is triggered by specially crafted SLDPRT content; exploitation is reported as a local, user-interaction–required scenario. Public ...

CVE-2024-23140

The CVE-2024-23140 entry concerns Autodesk AutoCAD components responsible for parsing 3DM and MODEL files. A maliciously crafted 3DM or MODEL file can trigger an Out-of-Bounds Read when processed by opennurbs.dll and atf_api.dll, potentially allowing a crash, reading of sensitive data, or executi...

CVE-2024-23159

CVE-2024-23159 affects Autodesk AutoCAD and related AutoCAD-based products via parsing a malicious STP file in the stp_aim_x64_vc15d.dll. The issue exposes uninitialized memory, enabling code execution in the current process when a user opens or processes a crafted STP file, with attack vector lo...

CVE-2024-37002

CVE-2024-37002 concerns Autodesk AutoCAD: a vulnerability in parsing MODEL files via ASMkern229A.dll that can trigger use of uninitialized memory, potentially enabling code execution in the current process. The issue is tied to Autodesk AutoCAD’s MODEL handling and is described with an impact of ...