AutoDesk Autocad Lt

Autodesk PDF Reader Heap Overflow via Malformed PDF
CVE-2025-8894 7.8 - High - September 16, 2025

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Heap-based Buffer Overflow

Out-of-Bounds Write in Autodesk PDF Parser via Malicious PDF
CVE-2025-8893 7.8 - High - September 16, 2025

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Memory Corruption

AutoCAD DGN Import Memory Corruption (CVE-2025-5048)
CVE-2025-5048 7.8 - High - August 15, 2025

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Classic Buffer Overflow

Uninitialized Variable in AutoCAD via Malicious DGN File – Crash or RCE
CVE-2025-5047 7.8 - High - August 15, 2025

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Use of Uninitialized Variable

AutoCAD OOBR via Malicious DGN File
CVE-2025-5046 7.8 - High - August 15, 2025

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Out-of-bounds Read

CVE-2025-1656: Heap Overflow in Autodesk App via Malicious PDF
CVE-2025-1656 7.8 - High - April 15, 2025

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Heap-based Buffer Overflow

Autodesk Image Import (JPG) Heap Overflow via Malicious File
CVE-2025-1275 7.8 - High - April 15, 2025

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Heap-based Buffer Overflow

Autodesk DWG OOB Write via Malicious DWG
CVE-2025-1276 7.8 - High - April 15, 2025

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Memory Corruption

Revit OOB Write via Malicious RCS File
CVE-2025-1274 7.8 - High - April 15, 2025

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Memory Corruption

Autodesk PDF Parser Memory Corruption Enables Arbitrary Code Exec
CVE-2025-1277 7.8 - High - April 15, 2025

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Classic Buffer Overflow

Autodesk PDF Heap Overflow CVE-2025-1273
CVE-2025-1273 7.8 - High - April 15, 2025

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Heap-based Buffer Overflow

Memory Corruption via malicious DWG file in acdb25.dll (AutoCAD)
CVE-2024-9997 7.8 - High - October 29, 2024

A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

OOB Write in acdb25.dll via Malicious DWG AutoCAD Crash / RCE
CVE-2024-9996 7.8 - High - October 29, 2024

A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Memory Corruption

Autocad OOBW via Malformed DWG File
CVE-2024-7991 7.8 - High - October 29, 2024

A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Memory Corruption

AutoCAD DWG Parser Stack-Based Buffer Overflow (CVE-2024-7992)
CVE-2024-7992 7.8 - High - October 29, 2024

A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

Acdb25.dll NULL Deref in AutoCAD: Crash & Code Exec via Malicious DXF
CVE-2024-8896 7.8 - High - October 29, 2024

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Use of Uninitialized Resource

Memory Corruption via Malformed DWG in ACAD.exe (AutoCAD)
CVE-2024-9489 7.8 - High - October 29, 2024

A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

OOB Write in Autodesk AutoCAD AdDwfPdk.dll via Malicious DWF
CVE-2024-7305 - August 20, 2024

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Autodesk DWG TrueView Stack-Based Overflow via Malicious DWG File
CVE-2024-23138 - March 18, 2024

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

AutoCAD STP File Untrusted Pointer Deref CVE-2023-41139
CVE-2023-41139 7.8 - High - November 23, 2023

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Buffer Overflow

Autodesk AutoCAD 2024/23 mem corruption via file parse (MODEL/SLDASM/SAT/CATPART)
CVE-2023-29076 9.8 - Critical - November 23, 2023

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Buffer Overflow

AutoCAD 2024/2023 OOB Write via Malformed PRT File
CVE-2023-29075 9.8 - Critical - November 23, 2023

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

OOB Write via Malicious CATPART in Autodesk AutoCAD 2024/2023
CVE-2023-29074 9.8 - Critical - November 23, 2023

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

Heap-Based Buffer Overflow in Autodesk AutoCAD PRT Parser (2023-2024)
CVE-2023-41140 7.8 - High - November 23, 2023

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

Heap Overflow via Malformed MODEL File in AutoCAD 2024/2023
CVE-2023-29073 9.8 - Critical - November 23, 2023

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Memory Corruption

Autodesk pskernel.dll Integer Overflow -> Code Execution
CVE-2023-25004 7.8 - High - June 27, 2023

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

Integer Overflow or Wraparound

Memory Corruption via Malicious File in pskernel.dll (Code Exec)
CVE-2023-29068 7.8 - High - June 27, 2023

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk AutoCAD/Maya pskernel.dll OOB Read/Write Code Exec
CVE-2023-25003 7.8 - High - June 23, 2023

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

Out-of-bounds Read

Stack Buffer Overflow in Autodesk AutoCAD 2023 via X_B File
CVE-2023-27914 7.8 - High - April 14, 2023

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Memory Corruption

AutoCAD 2023 X_B Memory Corruption (Write Access Violation) [CVE-2023-29067]
CVE-2023-29067 7.8 - High - April 14, 2023

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

AutoCAD 2023 X_B File Memory Corruption (CVE-2023-27915)
CVE-2023-27915 7.8 - High - April 14, 2023

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk AutoCAD 2023 Integer Overflow via Malicious X_B File
CVE-2023-27913 7.8 - High - April 14, 2023

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process.

Integer Overflow or Wraparound

AutoCAD 2023 OOB Read via Malicious X_B File
CVE-2023-27912 7.8 - High - April 14, 2023

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Out-of-bounds Read

Autodesk DesignReview.exe DWF/PCT Memory Corrupt RCE
CVE-2022-42944 7.8 - High - October 21, 2022

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

DesignReview.exe: .dwf/.pct File Causing Memory Corruption & Code Exec
CVE-2022-41309 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Memory Corruption in Autodesk Design Review via Malicious .dwf/.pct File
CVE-2022-41310 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Write Access Violation in Autodesk Design Review via Malformed .DWF/.PCT
CVE-2022-42933 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

CVE-2022-42934: Design Review memory corruption via crafted .DWF/.PCT
CVE-2022-42934 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Memory Corruption in Autodesk Design Review via Malicious .dwf/.pct Files
CVE-2022-42935 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

DesignReview.exe Read-Access Violation in DWF/.pct File Potential RCE
CVE-2022-42943 7.8 - High - October 21, 2022

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

DesignReview.exe Mem Corrupt via Malicious .dwf/.pct File (CVE-2022-42936)
CVE-2022-42936 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

DesignReview.exe DWF/PCT memory corruption CVE-2022-42937
CVE-2022-42937 7.8 - High - October 21, 2022

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Memory Corruption via Exploitative TGA File in Autodesk DesignReview
CVE-2022-42938 7.8 - High - October 21, 2022

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk Design Review TGA memory corruption (DesignReview.exe)
CVE-2022-42939 7.8 - High - October 21, 2022

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

DesignReview.exe TGA File Mem Corrupt & Code Exec
CVE-2022-42940 7.8 - High - October 21, 2022

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk DesignReview Memory Corrupt via Crafted DWF File
CVE-2022-42941 7.8 - High - October 21, 2022

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk Design Review memory corruption via crafted DWF/.pct file
CVE-2022-42942 7.8 - High - October 21, 2022

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Memory Corruption

Autodesk Image Processing TIFF Buffer Overflow Exec
CVE-2021-40162 7.8 - High - October 07, 2022

A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries when parsing the TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Out-of-bounds Read

Memory Corruption in Autodesk ImageProcessing DLL Enables Code Execution
CVE-2021-40163 7.8 - High - October 07, 2022

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing component.

Memory Corruption

ImageMagick heap overflow via TIFF/PICT/TGA parsing
CVE-2021-40164 7.8 - High - October 07, 2022

A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.

Memory Corruption