autodesk Vulnerability Advisory Catalog

Total 364 security vulnerabilities recorded for autodesk software and firmware.

← Back to All Vendors
Component: autocad_plant_3d

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can le...

📅 2025-09-16
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may l...

📅 2025-09-16
CVSS 7.8 Dossier →
Component: advance_steel

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious actor can leve...

📅 2025-08-15
CVSS 7.8 Dossier →
Component: advance_steel

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor can leverag...

📅 2025-08-15
CVSS 7.8 Dossier →
Component: advance_steel

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can le...

📅 2025-08-15
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can force a Memory Corruption vulnerability. A malicious actor can leve...

📅 2025-08-06
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage t...

📅 2025-08-06
CVSS 7.8 Dossier →
CVE-2025-6632 MEDIUM
Component: 3ds_max

A maliciously crafted PSD file, when linked or imported into Autodesk 3ds Max, can force an Out-of-Bounds Read vulnerability. A malicious actor can le...

📅 2025-08-06
CVSS 5.3 Dossier →
Component: shared_components

A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may l...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may l...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may l...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Use-After-Free vulnerability. A malicious actor can leverag...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when linked or imported into certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious act...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious actor may l...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted 3DM file, when linked or imported into certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious act...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: shared_components

A maliciously crafted X_T file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leve...

📅 2025-07-29
CVSS 7.8 Dossier →
Component: infrastructure_parts_editor

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the...

📅 2025-07-24
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this...

📅 2025-07-22
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted RTE file, when parsed through Autodesk Revit, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this...

📅 2025-07-10
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability. A malicious actor can le...

📅 2025-07-10
CVSS 7.8 Dossier →
CVE-2025-4605 MEDIUM
Component: maya

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may ...

📅 2025-06-11
CVSS 6.6 Dossier →
Component: installer

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being ...

📅 2025-06-10
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted RFA file, when linked or imported into Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can leverage ...

📅 2025-06-02
CVSS 7.8 Dossier →
Component: revit

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability. A malicious actor can lever...

📅 2025-04-15
CVSS 7.8 Dossier →
Page 3 of 16 (364 Total Records)