CVE-2021-40163

CVE-2021-40163 is a memory corruption vulnerability in Autodesk Image Processing component that can lead to code execution via a malicious DLL. The NVD entry notes local attack vector, user interaction required, with a base score of 7.8 (HIGH). The issue is repeatedly described across sources as ...

CVE-2023-25003

CVE-2023-25003 affects Autodesk AutoCAD 2023 and Autodesk Maya 2022 via a malicious pskernel.dll that enables out-of-bounds read/write conditions, potentially leading to code execution. The issue is caused by a vulnerability in the pskernel.dll handling, with exploitation implied by references to...

CVE-2022-33884

CVE-2022-33884 affects Autodesk AutoCAD 2022 and 2023. Root cause: parsing of X_B files can trigger a read past the end of an allocated buffer, leading to code execution in the context of the current process. Exploitation involves processing a maliciously crafted X_B file and may require user int...

CVE-2023-29068

CVE-2023-29068 : A maliciously crafted file consumed through the Autodesk pskernel.dll can cause memory corruption, which in conjunction with other vulnerabilities could lead to code execution in the context of the current process. The issue is associated with Autodesk products using pskernel.dll...

CVE-2021-40166

CVE-2021-40166 affects Autodesk Image Processing: parsing of a malicious PNG can trigger a use-after-free by freeing an object that has already been freed, potentially allowing arbitrary code execution. Documented impact is arbitrary code execution; no specific remediation/version fixes are state...

CVE-2023-29067

CVE-2023-29067 concerns Autodesk AutoCAD 2023 with a memory corruption vulnerability triggered by parsing a malicious X_B file, via a write access violation that could lead to code execution in the current process. Affected product: AutoCAD 2023; vulnerable component/file: X_B parsing path; root ...

CVE-2022-33886

CVE-2022-33886 affects Autodesk AutoCAD (versions up to 2023.x) and Autodesk Maya (2023/2022) via parsing of MODEL and SLDPRT files. The root cause is improper handling/validation of crafted MODEL and SLDPRT data, leading to a heap-based or general buffer overflow during parsing and resulting in ...

CVE-2021-40162

CVE-2021-40162 affects Autodesk Image Processing: a vulnerability where parsing TIFF/PICT/TGA/RLC files may cause reads beyond allocated boundaries, enabling arbitrary code execution. Root cause is in the image-processing component's handling of external image formats. Impact is high (AV Local, U...

CVE-2022-33881

CVE-2022-33881 affects Autodesk AutoCAD 2023 via parsing of PRT files, causing an out-of-bounds read in a component handling PRT data and potentially enabling code execution in the current process. Multiple trusted sources (NVD, Red Hat advisory, ZDI) describe remote code execution with user inte...

CVE-2024-8590

CVE-2024-8590: A Use-After-Free in AutoCAD’s atf_api.dll when parsing a crafted 3DM file can cause a crash, expose/write data, or allow arbitrary code execution in the process. Affected software is Autodesk AutoCAD (parsing of 3DM via atf_api.dll). Documented impact includes local access, high se...

CVE-2024-9827

CVE-2024-9827 affects Autodesk AutoCAD via CATPART parsing in CC5Dll.dll, causing an Out-of-Bounds Read. Public sources (NVD, Red Hat, Circl, ZDI) consistently describe potential crash, data exposure, and possible code execution in the context of the current process. ZDI details remote code execu...

CVE-2022-33889

CVE-2022-33889 affects Autodesk Design Review 2018 and AutoCAD 2022–2023. The issue is a heap-buffer overflow when parsing malicious GIF/JPEG files, enabling arbitrary code execution. The Red Hat/NVD entries and security bulletins reference the same vulnerability across products; Autodesk advisor...

CVE-2022-42943

CVE-2022-42943 describes a memory corruption vulnerability in Autodesk Design Review’s DesignReview.exe triggered by a maliciously crafted .dwf/.pct file. The issue arises from a read access violation when parsing the file, and could lead to code execution in the context of the affected process. ...

CVE-2024-8896

CVE-2024-8896 affects Autodesk AutoCAD via a vulnerability in acdb25.dll when parsing malicious DXF files. Root cause: accessing an uninitialized variable in memory, enabling arbitrary code execution or crashes in the current process. Documented impacts include crashing and potential data leakage...

CVE-2024-9489

CVE-2024-9489 involves Autodesk AutoCAD where parsing a malicious DWG file in ACAD.exe can trigger a memory corruption vulnerability. The description and related sources indicate possible outcomes include a crash, reading/writing sensitive data, or arbitrary code execution within the process cont...

CVE-2024-9996

CVE-2024-9996 affects Autodesk AutoCAD (acdb25.dll) via parsing a malicious DWG file, causing an Out-of-Bounds Write that can crash, corrupt data or allow arbitrary code execution in the current process. Exploitation requires user interaction (per CVSS) and is local. The issue is discussed in ZDI...

CVE-2024-9997

Autodesk AutoCAD is affected by CVE-2024-9997 due to a vulnerability in acdb25.dll when parsing a malicious DWG file, causing memory corruption that can crash the process or allow arbitrary code execution. The issue is detailed across multiple feeds (NVD, Red Hat, CIRCL, ZDI) with the impact desc...

CVE-2024-7991

CVE-2024-7991 concerns Autodesk AutoCAD (and AutoCAD-based products) where parsing a malicious DWG file can trigger an Out-of-Bounds Write, potentially crashing the application, corrupting data, or executing arbitrary code in the current process. Public sources in the provided set identify the vu...

CVE-2024-8598

CVE-2024-8598 describes a memory corruption vulnerability in Autodesk AutoCAD triggered by parsing a malicious STP/STEP file in the ACTranslators.exe component. A crafted STP file can cause a crash, allow reading/writing of sensitive data, or enable arbitrary code execution in the process context...

CVE-2021-40164

This CVE affects Autodesk Image Processing. A heap-based buffer overflow can occur while parsing TIFF, PICT, TGA, or RLC files, enabling arbitrary code execution. Root cause: improper handling during image parsing. Impact is high per sources; exploitation is possible when processing malformed ima...

CVE-2022-33888

CVE-2022-33888 affects Autodesk DWG processing of Dwg2Spd files. The vulnerability is described as a memory corruption issue caused by a write access violation during processing of a maliciously crafted Dwg2Spd file, which could lead to code execution in the context of the current process (local,...

CVE-2024-7992

Autodesk AutoCAD and certain AutoCAD-based products are affected by CVE-2024-7992 due to parsing a malicious DWG file that can trigger a stack-based buffer overflow. The vulnerability may crash the process, allow reading of sensitive data, or execute arbitrary code in the current process. Descrip...

CVE-2022-33887

The CVE-2022-33887 issue concerns Autodesk AutoCAD 2023 where parsing a malicious PDF can trigger an unhandled exception, potentially crashing the process, leaking data, or allowing arbitrary code execution. Multiple connected sources corroborate that the vulnerability stems from PDF parsing in A...

CVE-2022-33890

CVE-2022-33890 affects Autodesk Design Review through DesignReview.exe when processing a malicious PCT/DWF file, leading to a memory corruption via a read access violation. This could, in conjunction with other vulnerabilities, enable code execution in the current process. Multiple sources corrob...

CVE-2022-42936

Autodesk Design Review is affected by CVE-2022-42936. A maliciously crafted .dwf or .pct file consumed by DesignReview.exe can cause memory corruption via a write- access violation, which in combination with other vulnerabilities could lead to code execution in the context of the current process....

CVE-2024-8600

CVE-2024-8600 concerns Autodesk AutoCAD, where parsing a malicious SLDPRT file via the odxsw_dll.dll component can trigger a memory corruption vulnerability in the current process. The affected vector is local, with user interaction required, and the impact is described as potential crash, data d...

CVE-2021-40165

Summary: CVE-2021-40165 affects Autodesk Image Processing components. A crafted TIFF/PICT/TGA/RLC file can cause a write past the allocated buffer during parsing, potentially allowing arbitrary code execution. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, low attack complexity, ...

CVE-2022-42933

Summary (CVE-2022-42933) : Multiple connected sources describe a memory corruption vulnerability in Autodesk Design Review, triggered when parsing maliciously crafted .dwf or .pct files via the DesignReview.exe application. The root cause is a write access violation leading to memory corruption, ...

CVE-2022-42934

CVE-2022-42934 describes a memory corruption vulnerability in Autodesk Design Review where processing a maliciously crafted .dwf/.pct file via DesignReview.exe can cause a write-Access violation, potentially enabling code execution in the current process. Public sources (NVD/Red Hat/CNNVD) consis...

CVE-2023-29073

CVE-2023-29073 affects Autodesk AutoCAD 2023 and 2024. A maliciously crafted MODEL file can trigger a heap-based buffer overflow in the file parsing logic, leading to a crash, potential data exposure, or arbitrary code execution in the process context. Public sources consistently describe the iss...

CVE-2024-8588

CVE-2024-8588 affects Autodesk AutoCAD via parsing of SLDPRT files in the odxsw_dll.dll component. The vulnerability is an out-of-bounds read that can cause a crash, leak data, or allow arbitrary code execution in the context of the current process. Evidence from multiple sources confirms the roo...

CVE-2022-41309

Autodesk Design Review (DesignReview.exe) is affected by CVE-2022-41309 via a memory corruption vulnerability triggered by processing a maliciously crafted .dwf or .pct file, which could lead to code execution in the current process context. The issue centers on a write access violation causing m...

CVE-2022-42940

The CVE-2022-42940 entry describes a memory corruption vulnerability in Autodesk Design Review when processing a maliciously crafted TGA file via DesignReview.exe, potentially enabling code execution within the current process. Affected component: Design Review/DesignReview.exe; vulnerability ari...

CVE-2024-8595

CVE-2024-8595 affects Autodesk AutoCAD via libodxdll.dll when parsing a malicious MODEL file. The root cause is a Use-After-Free in parsing logic, enabling a local attacker (requires user interaction) to crash, read/write sensitive data, or execute arbitrary code within the process context. Publi...

CVE-2024-9826

CVE-2024-9826 affects Autodesk AutoCAD via a Use-After-Free in atf_api.dll when parsing a malicious 3DM file. Affected software: AutoCAD; vulnerable component/file: atf_api.dll; root cause: Use-After-Free vulnerability triggered by malformed 3DM input. Potential impacts per documents: crash, abil...

CVE-2022-42935

CVE-2022-42935 involves Autodesk Design Review. A maliciously crafted .dwf or .pct file consumed by DesignReview.exe can trigger a memory corruption write-access violation, potentially enabling code execution in the current process when combined with other vulnerabilities. Documents consistently ...

CVE-2022-42937

CVE-2022-42937 affects Autodesk Design Review’s DesignReview.exe via maliciously crafted .dwf or .pct files, causing memory corruption through a write access violation and potentially enabling code execution in the current process. Reports consistently describe a memory corruption vulnerability i...

CVE-2024-8591

CVE-2024-8591 affects Autodesk AutoCAD via parsing of 3DM files in AcTranslators.exe, causing a heap-based buffer overflow. The issue can crash the process, read/write memory, or allow arbitrary code execution in the current process context. Public disclosures (ZDI) describe remote code execution...

CVE-2023-25004

CVE-2023-25004 involves a maliciously crafted pskernel.dll in Autodesk products that triggers an integer overflow vulnerability, potentially enabling code execution. Connected advisories document affected Autodesk components such as InfraWorks and VRED variants and describe exploitation possibili...

CVE-2022-42939

Summary: CVE-2022-42939 affects Autodesk Design Review’s DesignReview.exe, where processing a maliciously crafted TGA file can cause memory corruption and potentially enable code execution in the current process. Affected component: DesignReview.exe (Autodesk). Root cause (as described): memory c...

CVE-2022-42941

CVE-2022-42941 affects Autodesk Design Review. A maliciously crafted DWF or PCT file consumed by DesignReview.exe can trigger a memory corruption via a read access violation, which in combination with other vulnerabilities could lead to code execution in the context of the current process. Connec...

CVE-2024-8597

Autodesk AutoCAD: CVE-2024-8597 affects STEP/STP parsing in ASMDATAX230A.dll. The vulnerability is described as a memory corruption that can crash the process or allow code execution. Exploitation requires user interaction (per ZDI advisory), and exists when parsing a malicious STEP/STP file. Aff...

CVE-2024-8599

CVE-2024-8599 refers to a memory corruption vulnerability in Autodesk AutoCAD that is triggered by parsing a malicious STP file in ACTranslators.exe. The issue can lead to a crash, potential exposure of sensitive data, or arbitrary code execution within the current process (local attacker, user i...

CVE-2022-33885

Summary : CVE-2022-33885 affects Autodesk AutoCAD 2022–2023. The vulnerability arises when parsing malicious X_B, CATIA, or PDF files, causing an out-of-bounds write that can yield arbitrary code execution. Affected software/trigger : Autodesk AutoCAD 2022–2023; parsing crafted X_B, CATIA, or PDF...

CVE-2022-41310

CVE-2022-41310: A maliciously crafted .dwf or .pct file consumed by Autodesk Design Review can cause a memory corruption vulnerability via a write access violation, potentially enabling code execution in the current process. Exploitation details (vectors, affected versions, fixes) are not consist...

CVE-2023-29076

CVE-2023-29076 affects Autodesk AutoCAD 2023 and 2024 via memory corruption when parsing certain file types (MODEL, SLDASM, SAT, CATPART). The root cause is unspecified in the Primary description, but multiple connected sources describe memory corruption that could lead to code execution in the c...

CVE-2024-8594

CVE-2024-8594 affects Autodesk AutoCAD via libodxdll.dll parsing of a malicious MODEL file, causing a heap-based overflow. Impact described: crash, potential data exposure, and arbitrary code execution in the current process. Affected component is libodxdll.dll within AutoCAD; exploitability deta...

CVE-2022-42942

CVE-2022-42942 affects Autodesk Design Review/DesignReview.exe. A maliciously crafted DWG? DWF or .pct file can trigger memory corruption via a read access violation, which, in conjunction with other vulnerabilities, could lead to code execution in the current process. The vulnerability is descri...

CVE-2023-27913

The CVE-2023-27913 issue affects Autodesk AutoCAD 2023 where parsing a malicious X_B file can trigger an integer overflow, potentially crashing the process, exposing data, or allowing code execution. Root cause: overflow during parsing of the X_B input. Affected product/variant: Autodesk AutoCAD ...

CVE-2024-8589

CVE-2024-8589 affects Autodesk AutoCAD via parsing of SLDPRT files in the odxsw_dll.dll. The issue is described as an Out-of-Bounds Read vulnerability that can crash the process, disclose sensitive data, or allow arbitrary code execution in the current process. Public references (NVD, Red Hat, ZD...