CVE-2022-25795

CVE-2022-25795 describes a memory corruption vulnerability in Autodesk TrueView 2022 and 2021 that may lead to remote code execution via maliciously crafted DWG files. The available sources state the affected products and the high-level impact but do not provide concrete details on the root cause...

CVE-2021-40161

Summary (CVE-2021-40161) : The issue affects PDFTron software; memory corruption can enable remote code execution when processing PDFs containing malicious DLL references. Root cause is errors in the mechanism that checks the path to dynamically loaded libraries (DLLs). Affected products are PDFT...

CVE-2021-27039

The CVE-2021-27039 entry describes a buffer/heap-based overflow when parsing TIFF and PCX files in Autodesk Design Review (and related Autodesk tooling such as AutoCAD context). The underlying issue is improper bounds/length validation during TIFF/PCX parsing, enabling read/write beyond allocated...

CVE-2022-33889

CVE-2022-33889 affects Autodesk Design Review 2018 and AutoCAD 2022–2023. The issue is a heap-buffer overflow when parsing malicious GIF/JPEG files, enabling arbitrary code execution. The Red Hat/NVD entries and security bulletins reference the same vulnerability across products; Autodesk advisor...

CVE-2022-33890

CVE-2022-33890 affects Autodesk Design Review through DesignReview.exe when processing a malicious PCT/DWF file, leading to a memory corruption via a read access violation. This could, in conjunction with other vulnerabilities, enable code execution in the current process. Multiple sources corrob...

CVE-2023-29073

CVE-2023-29073 affects Autodesk AutoCAD 2023 and 2024. A maliciously crafted MODEL file can trigger a heap-based buffer overflow in the file parsing logic, leading to a crash, potential data exposure, or arbitrary code execution in the process context. Public sources consistently describe the iss...

CVE-2023-29076

CVE-2023-29076 affects Autodesk AutoCAD 2023 and 2024 via memory corruption when parsing certain file types (MODEL, SLDASM, SAT, CATPART). The root cause is unspecified in the Primary description, but multiple connected sources describe memory corruption that could lead to code execution in the c...

CVE-2023-41140

CVE-2023-41140 concerns Autodesk AutoCAD 2023 and 2024, where parsing a malicious PRT file can trigger a heap-based buffer overflow in the parsing code. Affected component: PRT file parsing in AutoCAD. Underlying impact: crash, data leakage, or arbitrary code execution in the current process. Exp...

CVE-2023-41139

CVE-2023-41139 affects Autodesk AutoCAD 2023 and 2024, where parsing a malicious STP file can dereference an untrusted pointer, potentially causing code execution in the current process. The vulnerability is tied to the STP parsing path and has been reinforced by multiple advisories and vendor re...

CVE-2023-29075

CVE-2023-29075 concerns Autodesk AutoCAD 2023 and 2024. A maliciously crafted PRT file, when parsed, can trigger an Out-of-Bounds Write, enabling crashes, data disclosure, or arbitrary code execution in the process context. The vulnerability arises from parsing PRT files in AutoCAD, with impact r...

CVE-2023-29074

Summary: CVE-2023-29074 affects Autodesk AutoCAD 2023 and 2024 via parsing CATPART files. The vulnerability is an out-of-bounds write in the CATPART parsing path that can lead to a crash, data leakage, or arbitrary code execution in the process context, as stated across NVD/Red Hat and security a...