Read the docs

Autodesk

Records390All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high346CVSS 7.0–8.9

Exploited now

Autodesk records in CISA KEV

No Autodesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

40 records in Revit · all components

Priority LOW 36

A maliciously crafted RFA, RTE, or RVT file, when parsed through Autodesk Revit, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00379 Published 2025-07-10 Fixed in 2026.2, 2025.4.2 +2 CWE-120
Priority LOW 36

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00328 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 CWE-122
Priority LOW 36

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00271 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-122
Priority LOW 36

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00271 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +4 CWE-120
Priority LOW 36

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00294 Published 2025-04-15 Fixed in 2025.1.2, 2024.1.7 +1 CWE-787
Priority LOW 36

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00377 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +3 CWE-122
Priority LOW 36

A maliciously crafted DWG file, when parsed in Revit, can force a stack-based buffer overflow.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00235 Published 2024-08-21 Fixed in 2025.1, 2024.2.2 +2 CWE-121
TI-2023-13518 CVE-2023-29068 · GHSA-fw27-7fvf-jgxv

Out-of-bounds write in Autodesk products

Priority LOW 36

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-787
TI-2023-10477 CVE-2023-25004 · GHSA-2w8c-hj6v-28vw

Integer overflow in Autodesk products

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-190
TI-2023-10476 CVE-2023-25003 · GHSA-gf4x-x9q7-jgg2

Out-of-bounds read in AutoCAD, Maya

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2023-06-23 No fix listed CWE-125
TI-2023-10475 CVE-2023-25002 · GHSA-p642-fwhv-jwmj

Use after free in Multiple

Priority LOW 36

A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00349 Published 2023-06-27 No fix listed CWE-416
Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-122
Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-787
Priority LOW 35

A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Type Confusion vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0018 Published 2025-09-23 Fixed in 2026.3, 2025.4.4 +1 CWE-843
Load more
Open these records in search →