Read the docs

Autodesk

Records390All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high346CVSS 7.0–8.9

Exploited now

Autodesk records in CISA KEV

No Autodesk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

32 records in Shared Components · all components

TI-2026-00655 CVE-2026-0875 · GHSA-rcjr-qg8v-4c3v

MODEL File Parsing Out-of-Bounds Write

Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00254 Published 2026-02-18 Fixed in 1.10.0.4 CWE-787
TI-2026-00654 CVE-2026-0874 · GHSA-h5jq-923c-7w8g

CATPART File Parsing Out-of-Bounds Write

Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00254 Published 2026-02-18 Fixed in 1.10.0.4 CWE-787
Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7, 2024.1.9 +1 CWE-787
Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 36

AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7, 2024.1.9 +1 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0, 2025.1.4 +1 CWE-122
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 35

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00162 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2025-11-07 Fixed in 1.8.0.7 CWE-122
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00191 Published 2025-12-15 Fixed in 1.9.0.7 CWE-122
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0018 Published 2025-09-22 Fixed in 1.8.0.7 CWE-120
Priority LOW 35

A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00191 Published 2025-07-29 Fixed in 1.7.0.10, 2025.1.3 +2 CWE-787
Load more
Open these records in search →