← Back

Autodesk

autodesk

361 CVEs • 74 products

Products (74)

Click to collapse
Toggle
Autocad
autocad
Autocad Mep
autocad_mep
Advance Steel
advance_steel
Civil 3d
civil_3d
Autocad Lt
autocad_lt
Navisworks
navisworks
Design Review
design_review
Revit
revit
3ds Max
3ds_max
Dwg Trueview
dwg_trueview
Inventor
inventor
Fusion
fusion
Fbx Review
fbx_review
Infraworks
infraworks
Autocad P&id
autocad_p&id
Vred
vred
Maya Usd
maya_usd
3ds Max Usd
3ds_max_usd
Installer
installer
Maya
maya
Alias
alias
Dwf Viewer
dwf_viewer
Vault
vault
Civil Design
civil_design
Land Desktop
land_desktop
Map 3d
map_3d
Raster Design
raster_design
Survey
survey
Utility Design
utility_design
Viz
viz
Backburner
backburner
Autodesk Maya
autodesk_maya
Autocad Ecscad
autocad_ecscad
Sketchbook
sketchbook
Dynamo Bim
dynamo_bim
Fusion 360
fusion_360
Revit Lt
revit_lt

CVEs (361)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Autodesk
1Design Review
Nov 21, 2024
Apr 18, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabiliti...Show more
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
1Dwg Trueview
Nov 21, 2024
Apr 13, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction wit...Show more
An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
1Dwg Trueview
Nov 21, 2024
Apr 13, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with o...Show more
A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
1Dwg Trueview
Nov 21, 2024
Apr 13, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails...Show more
A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception.Show less
1Autodesk
1Autocad
Nov 21, 2024
Apr 13, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A Memory Corruption Vulnerability in Autodesk TrueView 2022 and 2021 may lead to remote code execution through maliciously crafted DWG files.
1Autodesk
1Navisworks
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
1Autodesk
1Navisworks
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in th...Show more
A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.Show less
1Autodesk
1Fbx Review
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are create...Show more
An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.2 and prior may lead to code execution through maliciously crafted ActionScript Byte Code 'ABC' files or information disclosure. ABC files are created by the Flash compiler and contain executable code. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
11Advance Steel
AutocadAutocad Architecture+8 more
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exp...Show more
A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability can be exploited to execute arbitrary code.Show less
1Autodesk
11Advance Steel
AutocadAutocad Architecture+8 more
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
4.4 MEDIUM· v2
A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.
1Autodesk
11Advance Steel
AutocadAutocad Architecture+8 more
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability m...Show more
A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files. Exploitation of this vulnerability may lead to code execution.Show less
1Autodesk
10Advance Steel
AutocadAutocad Architecture+7 more
Nov 21, 2024
Apr 11, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
1Autodesk
1Design Review
Nov 21, 2024
Jan 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities...Show more
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
11Advance Steel
AutocadAutocad Architecture+8 more
Nov 21, 2024
Jan 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of...Show more
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.Show less
1Autodesk
11Advance Steel
AutocadAutocad Architecture+8 more
Nov 21, 2024
Jan 25, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerab...Show more
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.Show less
1Autodesk
13Advance Steel
AutocadAutocad Architecture+10 more
Nov 21, 2024
Dec 23, 2021
N/A· v4
7.8 HIGH· v3
4.4 MEDIUM· v2
A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7 version.
1Autodesk
13Advance Steel
AutocadAutocad Architecture+10 more
Nov 21, 2024
Dec 23, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This vulnerability can be exploited to execute arbitrary code.
1Autodesk
1Navisworks
Nov 21, 2024
Sep 15, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to write beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
1Autodesk
1Navisworks
Nov 21, 2024
Sep 15, 2021
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
A maliciously crafted DWG file in Autodesk Navisworks 2019, 2020, 2021, 2022 can be forced to read beyond allocated boundaries when parsing the DWG files. This vulnerability can be exploited to execute arbitrary code.
1Autodesk
1Navisworks
Nov 21, 2024
Sep 15, 2021
N/A· v4
7.8 HIGH· v3
4.4 MEDIUM· v2
A Memory Corruption vulnerability for PDF files in Autodesk Navisworks 2019, 2020, 2021, 2022 may lead to code execution through maliciously crafted DLL files.