Autodesk

Autocad

163 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-7305

  • EPSS 0.14%
  • Veröffentlicht 20.08.2024 00:15:04
  • Zuletzt bearbeitet 30.07.2025 17:26:19

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code...

7.8

CVE-2024-37006

  • EPSS 0.23%
  • Veröffentlicht 25.06.2024 04:15:16
  • Zuletzt bearbeitet 22.01.2026 15:16:46

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code e...

7.8

CVE-2024-37007

  • EPSS 0.26%
  • Veröffentlicht 25.06.2024 04:15:16
  • Zuletzt bearbeitet 06.05.2025 17:18:01

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

7.8

CVE-2024-36999

  • EPSS 0.17%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 20:39:28

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the c...

7.8

CVE-2024-37003

  • EPSS 0.12%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 20:41:58

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive d...

7.8

CVE-2024-37004

  • EPSS 0.2%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 21:12:18

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

7.8

CVE-2024-37005

  • EPSS 0.13%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 14:46:31

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the contex...

7.8

CVE-2024-23158

  • EPSS 0.21%
  • Veröffentlicht 25.06.2024 04:15:14
  • Zuletzt bearbeitet 13.11.2025 20:32:49

A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the ...

7.8

CVE-2024-23159

  • EPSS 0.18%
  • Veröffentlicht 25.06.2024 04:15:14
  • Zuletzt bearbeitet 13.11.2025 20:36:36

A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.

7.8

CVE-2024-23154

  • EPSS 0.17%
  • Veröffentlicht 25.06.2024 04:15:13
  • Zuletzt bearbeitet 13.11.2025 20:30:55

A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary c...