Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

32 records

TI-2026-00655 CVE-2026-0875 · GHSA-rcjr-qg8v-4c3v

MODEL File Parsing Out-of-Bounds Write

Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00254 Published 2026-02-18 Fixed in 1.10.0.4 CWE-787
TI-2026-00654 CVE-2026-0874 · GHSA-h5jq-923c-7w8g

CATPART File Parsing Out-of-Bounds Write

Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00254 Published 2026-02-18 Fixed in 1.10.0.4 CWE-787
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7, 2024.1.9 +1 CWE-787
Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 36

AA maliciously crafted MODEL file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 35

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00162 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 36

A maliciously crafted MODEL file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-120
Priority LOW 36

AA maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted X_T file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0.7, 2024.1.9 +1 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00278 Published 2025-12-15 Fixed in 1.9.0, 2025.1.4 +1 CWE-122
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00191 Published 2025-12-15 Fixed in 1.9.0.7 CWE-122
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 36

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force a Memory corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00287 Published 2025-12-15 Fixed in 1.9.0.7 CWE-787
Priority LOW 36

A maliciously crafted CATPART file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00258 Published 2025-12-15 Fixed in 1.9.0.7 CWE-125
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00212 Published 2025-11-07 Fixed in 1.8.0.7 CWE-122
Priority LOW 35

A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0018 Published 2025-09-22 Fixed in 1.8.0.7 CWE-120
Priority LOW 35

A maliciously crafted 3DM file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00191 Published 2025-07-29 Fixed in 1.7.0.10, 2025.1.3 +2 CWE-787
Load more