Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

9 records

TI-2023-13518 CVE-2023-29068 · GHSA-fw27-7fvf-jgxv

Out-of-bounds write in Autodesk products

Priority LOW 36

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-787
TI-2023-10477 CVE-2023-25004 · GHSA-2w8c-hj6v-28vw

Integer overflow in Autodesk products

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-190
TI-2023-10476 CVE-2023-25003 · GHSA-gf4x-x9q7-jgg2

Out-of-bounds read in AutoCAD, Maya

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00251 Published 2023-06-23 No fix listed CWE-125
Priority LOW 35

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0022 Published 2023-05-12 No fix listed CWE-427