VYPR

Vendor CVEs

Autodesk

All CVEs

377 total · sorted by risk
  • CVE-2024-23126HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current…

  • CVE-2024-23125HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current…

  • CVE-2024-23124HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the…

  • CVE-2024-23123HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the…

  • CVE-2024-23122HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the…

  • CVE-2024-23121HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.01

    A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the…

  • CVE-2024-23120HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute…

  • CVE-2024-0446HigFeb 22, 2024
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute…

  • CVE-2023-41140HigNov 23, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current…

  • CVE-2023-41139HigNov 23, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

  • CVE-2023-29069HigNov 22, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.

  • CVE-2023-25002HigJun 27, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

  • CVE-2023-25001HigJun 27, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.

  • CVE-2023-29068HigJun 27, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2023-25004HigJun 27, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

  • CVE-2023-27908HigJun 23, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability.

  • CVE-2023-25003HigJun 23, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read vulnerabilities. Exploitation of this vulnerability may lead to code execution.

  • CVE-2023-25009HigMay 12, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution.

  • CVE-2023-25008HigMay 12, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds read vulnerability which could result in code execution.

  • CVE-2023-25007HigMay 12, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a user to open a malicious USD file that may trigger an uninitialized pointer which could result in code execution.

  • CVE-2023-25006HigMay 12, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a user to open a malicious USD file that may trigger a use-after-free vulnerability which could result in code execution.

  • CVE-2023-25005HigMay 12, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.

  • CVE-2023-27911HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.01

    A user may be tricked into opening a malicious FBX file that may exploit a heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.

  • CVE-2023-27910HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.01

    A user may be tricked into opening a malicious FBX file that may exploit a stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior which may lead to code execution.

  • CVE-2023-27909HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.00

    An Out-Of-Bounds Write Vulnerability in Autodesk® FBX® SDK version 2020 or prior may lead to code execution through maliciously crafted FBX files or information disclosure.

  • CVE-2023-27907HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds write vulnerability which may result in code execution.

  • CVE-2023-27906HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code execution.

  • CVE-2023-25010HigApr 17, 2023
    risk 0.51cvss 7.8epss 0.00

    A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.

  • CVE-2023-29067HigApr 14, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2023-27915HigApr 14, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2023-27914HigApr 14, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in…

  • CVE-2023-27913HigApr 14, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process.

  • CVE-2023-27912HigApr 14, 2023
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

  • CVE-2022-42947HigDec 19, 2022
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted X_B file when parsed through Autodesk Maya 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.

  • CVE-2022-42945HigDec 19, 2022
    risk 0.51cvss 7.8epss 0.00

    DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system.

  • CVE-2022-42944HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current…

  • CVE-2022-42943HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current…

  • CVE-2022-42942HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current…

  • CVE-2022-42941HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current…

  • CVE-2022-42940HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2022-42939HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2022-42938HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

  • CVE-2022-42937HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-42936HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-42935HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-42934HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-42933HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-41310HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-41309HigOct 21, 2022
    risk 0.51cvss 7.8epss 0.00

    A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

  • CVE-2022-41308HigOct 14, 2022
    risk 0.51cvss 7.8epss 0.00

    A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the…

Page 5 of 8