Read the docs

Autodesk

Records390All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high346CVSS 7.0–8.9

Exploited now

Autodesk records in CISA KEV

No Autodesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

27 records in Dwg Trueview · all components

Priority LOW 36

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0028 Published 2026-07-29 Fixed in 2027.1.0 CWE-122
Priority LOW 36

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00294 Published 2025-04-15 Fixed in 2025.1.2, 2024.1.7 +1 CWE-787
Priority LOW 36

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00377 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +3 CWE-122
TI-2022-20931 CVE-2022-42945 · GHSA-fx95-q83h-x9m8

Uncontrolled search path in DWG TrueView

Priority LOW 36

DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00271 Published 2022-12-19 No fix listed CWE-427
TI-2022-09369 CVE-2022-25797 · GHSA-6pm8-5qm6-2qrm

Out-of-bounds write in Autodesk Trueview

Priority LOW 36

A maliciously crafted PDF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to dereference for a write beyond the allocated buffer while parsing PDF files.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01167 Published 2022-04-13 No fix listed CWE-787
Priority LOW 35

A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00188 Published 2024-10-29 Fixed in 2025.1.1, 2024.1.7 +2 CWE-787
Priority LOW 35

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00208 Published 2024-08-19 Fixed in 2025.1, 2024.1.6 +2 CWE-787
TI-2022-10530 CVE-2022-27524 · GHSA-4g4r-m9qf-wf8m

Out-of-bounds read in Autodesk Trueview

Priority LOW 34

An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01437 Published 2022-04-13 No fix listed CWE-125
TI-2022-10529 CVE-2022-27523 · GHSA-c72v-cfc9-xq8m

Out-of-bounds read in Autodesk Trueview

Priority LOW 34

A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maliciously crafted DWG file as an Input.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01437 Published 2022-04-13 No fix listed CWE-125
Priority LOW 31

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00258 Published 2026-07-29 Fixed in 2027.1.0 CWE-125
Priority LOW 24

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00254 Published 2026-07-29 Fixed in 2027.1.0 CWE-125
Load more
Open these records in search →