Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

95 records

Vendor: Autodesk Component: Advance Steel Clear all filters
TI-2026-06508 CVE-2026-7405 · GHSA-ww8h-hg5f-w94j

TIF File Parsing Out-of-Bounds Read in certain Autodesk products

Priority LOW 24

A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00162 Published 2026-08-06 Fixed in 2027.1.0, 2026.5.0 +3 CWE-125
TI-2026-14394 CVE-2026-17550 · GHSA-fpp4-v32m-5wmg

DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD

Priority LOW 24

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00254 Published 2026-07-29 Fixed in 2027.1.0 CWE-125
TI-2026-13757 CVE-2026-16465 · GHSA-6vgj-fv64-hcvj

DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD

Priority LOW 31

A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00258 Published 2026-07-29 Fixed in 2027.1.0 CWE-125
TI-2026-13756 CVE-2026-16463 · GHSA-6j5h-wf67-fv42

DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD

Priority LOW 36

A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0028 Published 2026-07-29 Fixed in 2027.1.0 CWE-122
TI-2025-08142 CVE-2025-8894 · GHSA-fmr9-57qr-252w

PDF File Parsing Heap-Based Buffer Overflow Vulnerability

Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-122
TI-2025-08141 CVE-2025-8893 · GHSA-643f-mwpp-p2r3

PDF File Parsing Out-of-Bounds Write Vulnerability

Priority LOW 35

A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00172 Published 2025-09-16 Fixed in 2026.3, 2025.4.3 +5 CWE-787
TI-2025-04524 CVE-2025-5048 · GHSA-h784-824v-jrpw

DGN File Parsing Memory Corruption Vulnerability

Priority LOW 35

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00196 Published 2025-08-15 Fixed in 2026.1, 2025.1.3 +2 CWE-120
TI-2025-04523 CVE-2025-5047 · GHSA-894q-229w-7393

DGN File Parsing Uninitialized Variable Vulnerability

Priority LOW 35

A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00196 Published 2025-08-15 Fixed in 2026.1, 2025.1.3 +2 CWE-457
TI-2025-04522 CVE-2025-5046 · GHSA-444p-vrjm-ch4f

DGN File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 35

A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00196 Published 2025-08-15 Fixed in 2026.1, 2025.1.3 +2 CWE-125
TI-2025-01090 CVE-2025-1276 · GHSA-v6hw-wwhm-q834

DWG File Parsing Out-of-Bounds Write Vulnerability

Priority LOW 36

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00294 Published 2025-04-15 Fixed in 2025.1.2, 2024.1.7 +1 CWE-787
TI-2025-01089 CVE-2025-1275 · GHSA-vvqg-86qw-rhm8

JPG File Parsing Heap-Based Overflow Vulnerability

Priority LOW 36

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00377 Published 2025-04-15 Fixed in 2025.4.1, 2024.3.2 +3 CWE-122
TI-2025-01420 CVE-2025-1652 · GHSA-rrcm-jcf5-7g58

MODEL File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 36

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-125
TI-2025-01419 CVE-2025-1651 · GHSA-hgvp-m8qf-mg69

MODEL File Parsing Heap-Based Buffer Overflow Vulnerability

Priority LOW 36

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-122
TI-2025-01418 CVE-2025-1650 · GHSA-wr75-c4vc-pmxm

CATPRODUCT File Parsing Uninitialized Variable Vulnerability

Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-457
TI-2025-01417 CVE-2025-1649 · GHSA-xrm7-9mcw-9wr5

CATPRODUCT File Parsing Uninitialized Variable Vulnerability

Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-457
TI-2025-01233 CVE-2025-1433 · GHSA-hfmw-vf42-2cww

MODEL File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 36

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-125
TI-2025-01232 CVE-2025-1432 · GHSA-cjq5-pp78-cwj7

3DM File Parsing Use-After-Free Vulnerability

Priority LOW 36

A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00282 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-416
TI-2025-01231 CVE-2025-1431 · GHSA-r9gc-v2rf-ccgc

SLDPRT File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-125
TI-2025-01230 CVE-2025-1430 · GHSA-fx4p-gr2c-m33q

SLDPRT File Parsing Memory Corruption Vulnerability

Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-120
TI-2025-01229 CVE-2025-1429 · GHSA-7w8w-85w5-f5qw

MODEL File Parsing Heap-Based Buffer Overflow Vulnerability

Priority LOW 36

A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00231 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-122
TI-2025-01228 CVE-2025-1428 · GHSA-3vgw-93xw-5c6g

CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability

Priority LOW 36

A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00284 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-125
TI-2025-01227 CVE-2025-1427 · GHSA-3r8r-7qh7-3hh4

CATPRODUCT File Parsing Uninitialized Variable Vulnerability

Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2025-03-13 Fixed in 2025.1.2, 2024.1.7 +2 CWE-457
TI-2024-06766 CVE-2024-7305 · GHSA-wf24-wx24-rpxv

DWF Vulnerability in Autodesk Desktop Software

Priority LOW 35

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00208 Published 2024-08-19 Fixed in 2025.1, 2024.1.6 +2 CWE-787
Load more