autodesk Vulnerability Advisory Catalog

Total 364 security vulnerabilities recorded for autodesk software and firmware.

← Back to All Vendors
Component: autocad

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds W...

๐Ÿ“… 2024-02-22
CVSS 7.8 Dossier →
Component: autocad

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bo...

๐Ÿ“… 2024-02-22
CVSS 7.8 Dossier →
Component: autocad

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor...

๐Ÿ“… 2023-11-23
CVSS 7.8 Dossier →
Component: autocad

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability,...

๐Ÿ“… 2023-11-23
CVSS 7.8 Dossier →
CVE-2023-29076 CRITICAL
Component: autocad

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerabilit...

๐Ÿ“… 2023-11-23
CVSS 9.8 Dossier →
CVE-2023-29075 CRITICAL
Component: autocad

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can l...

๐Ÿ“… 2023-11-23
CVSS 9.8 Dossier →
CVE-2023-29074 CRITICAL
Component: autocad

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor c...

๐Ÿ“… 2023-11-23
CVSS 9.8 Dossier →
CVE-2023-29073 CRITICAL
Component: autocad

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious act...

๐Ÿ“… 2023-11-23
CVSS 9.8 Dossier →
Component: customer_portal

Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account. ...

๐Ÿ“… 2023-11-22
CVSS 4.3 Dossier →
Component: customer_portal

Autodesk users who no longer have an active license for an account can still access cases for that account. ...

๐Ÿ“… 2023-11-22
CVSS 5.3 Dossier →
Component: desktop_connector

A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DL...

๐Ÿ“… 2023-11-22
CVSS 7.8 Dossier →
Component: 3ds_max

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to co...

๐Ÿ“… 2023-06-27
CVSS 7.8 Dossier →
Component: navisworks

A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerabilit...

๐Ÿ“… 2023-06-27
CVSS 7.8 Dossier →
Component: alias

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction wi...

๐Ÿ“… 2023-06-27
CVSS 7.8 Dossier →
Component: alias

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilitie...

๐Ÿ“… 2023-06-27
CVSS 7.8 Dossier →
Component: installer

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead ...

๐Ÿ“… 2023-06-23
CVSS 7.8 Dossier →
Component: alias

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. ...

๐Ÿ“… 2023-06-23
CVSS 7.8 Dossier →
Component: 3ds_max_usd

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code ex...

๐Ÿ“… 2023-05-12
CVSS 7.8 Dossier →
Component: 3ds_max_usd

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code exe...

๐Ÿ“… 2023-05-12
CVSS 7.8 Dossier →
Component: 3ds_max_usd

A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution....

๐Ÿ“… 2023-05-12
CVSS 7.8 Dossier →
Component: 3ds_max_usd

A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code executio...

๐Ÿ“… 2023-05-12
CVSS 7.8 Dossier →
Component: infraworks

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files coul...

๐Ÿ“… 2023-05-12
CVSS 7.8 Dossier →
Component: fbx_software_development_kit

A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodeskยฎ FBXยฎ SDK 2020 or prior whic...

๐Ÿ“… 2023-04-17
CVSS 7.8 Dossier →
Component: fbx_software_development_kit

A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodeskยฎ FBXยฎ SDK 2020 or prior whi...

๐Ÿ“… 2023-04-17
CVSS 7.8 Dossier →
Page 9 of 16 (364 Total Records)