CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Autodesk : Security Vulnerabilities

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2022-42947 787 Exec Code 2022-12-19 2022-12-28
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted X_B file when parsed through Autodesk Maya 2023 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
2 CVE-2022-42946 125 Exec Code 2022-12-19 2022-12-28
0.0
None ??? ??? ??? ??? ??? ???
Parsing a maliciously crafted X_B and PRT file can force Autodesk Maya 2023 to read beyond allocated buffer. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
3 CVE-2022-42945 427 Exec Code 2022-12-19 2022-12-28
0.0
None ??? ??? ??? ??? ??? ???
DWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful exploitation by a malicious attacker could result in remote code execution on the target system.
4 CVE-2022-42944 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
5 CVE-2022-42943 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
6 CVE-2022-42942 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
7 CVE-2022-42941 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
8 CVE-2022-42940 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
9 CVE-2022-42939 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
10 CVE-2022-42938 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
11 CVE-2022-42937 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
12 CVE-2022-42936 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
13 CVE-2022-42935 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
14 CVE-2022-42934 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
15 CVE-2022-42933 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
16 CVE-2022-41310 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
17 CVE-2022-41309 787 Exec Code Mem. Corr. 2022-10-21 2022-10-24
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
18 CVE-2022-41308 787 Exec Code Mem. Corr. 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
19 CVE-2022-41307 787 Exec Code Mem. Corr. 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
20 CVE-2022-41306 787 Exec Code Mem. Corr. 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PCT file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
21 CVE-2022-41305 787 Exec Code Mem. Corr. 2022-10-14 2022-10-18
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
22 CVE-2022-41304 787 Exec Code 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
An Out-Of-Bounds Write Vulnerability in Autodesk FBX SDK 2020 version and prior may lead to code execution through maliciously crafted FBX files or information disclosure.
23 CVE-2022-41303 416 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in Autodesk FBX SDK 2020 version causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system.
24 CVE-2022-41302 125 Exec Code 2022-10-14 2022-10-19
0.0
None ??? ??? ??? ??? ??? ???
An Out-Of-Bounds Read Vulnerability in Autodesk FBX SDK version 2020. and prior may lead to code execution or information disclosure through maliciously crafted FBX files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
25 CVE-2022-41301 787 Exec Code Mem. Corr. 2022-10-03 2022-12-09
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
26 CVE-2022-33890 787 Exec Code Mem. Corr. 2022-10-03 2022-12-03
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
27 CVE-2022-33889 787 Exec Code 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.
28 CVE-2022-33888 787 Exec Code Mem. Corr. 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
29 CVE-2022-33887 755 Exec Code 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
30 CVE-2022-33886 755 Exec Code 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023 and 2022. The vulnerability exists because the application fails to handle crafted MODEL and SLDPRT files, which causes an unhandled exception. An attacker can leverage this vulnerability to execute arbitrary code.
31 CVE-2022-33885 787 Exec Code 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
32 CVE-2022-33884 125 Exec Code 2022-10-03 2022-10-07
0.0
None ??? ??? ??? ??? ??? ???
Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
33 CVE-2022-33883 787 Exec Code Mem. Corr. 2022-10-03 2022-10-04
0.0
None ??? ??? ??? ??? ??? ???
A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
34 CVE-2022-33882 Exec Code 2022-10-03 2022-10-05
0.0
None ??? ??? ??? ??? ??? ???
Under certain conditions, an attacker could create an unintended sphere of control through a vulnerability present in file delete operation in Autodesk desktop app (ADA). An attacker could leverage this vulnerability to escalate privileges and execute arbitrary code.
35 CVE-2022-33881 125 Exec Code 2022-07-29 2022-08-05
0.0
None ??? ??? ??? ??? ??? ???
Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
36 CVE-2022-27873 611 +Info 2022-07-29 2022-08-05
0.0
None ??? ??? ??? ??? ??? ???
An attacker can force the victim’s device to perform arbitrary HTTP requests in WAN through a malicious SVG file being parsed by Autodesk Fusion 360’s document parser. The vulnerability exists in the application’s ‘Insert SVG’ procedure. An attacker can also leverage this vulnerability to obtain victim’s public IP and possibly other sensitive information.
37 CVE-2022-27872 755 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.
38 CVE-2022-27871 770 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files. This vulnerability may be exploited to execute arbitrary code.
39 CVE-2022-27870 787 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted TGA file in Autodesk AutoCAD 2023 may be used to write beyond the allocated buffer while parsing TGA file. This vulnerability may be exploited to execute arbitrary code.
40 CVE-2022-27869 125 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted TIFF file in Autodesk AutoCAD 2023 can be forced to read and write beyond allocated boundaries when parsing the TIFF file. This vulnerability can be exploited to execute arbitrary code.
41 CVE-2022-27868 416 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted CAT file in Autodesk AutoCAD 2023 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
42 CVE-2022-27867 416 Exec Code 2022-06-21 2022-06-29
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted JT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
43 CVE-2022-27866 125 Exec Code 2022-07-29 2022-08-08
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted TIFF file when consumed through DesignReview.exe application can be forced to read beyond allocated boundaries when parsing the TIFF file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
44 CVE-2022-27865 787 Exec Code 2022-07-29 2022-08-09
0.0
None ??? ??? ??? ??? ??? ???
A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX files. This vulnerability may be exploited to execute arbitrary code.
45 CVE-2022-27864 415 Exec Code 2022-07-29 2022-08-08
0.0
None ??? ??? ??? ??? ??? ???
A Double Free vulnerability allows remote attackers to execute arbitrary code through DesignReview.exe application on PDF files within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
46 CVE-2022-27532 787 Exec Code 2022-06-16 2022-06-27
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted TIF file in Autodesk 3ds Max 2022 and 2021 can be used to write beyond the allocated buffer while parsing TIF files. This vulnerability in conjunction with other vulnerabilities could lead to arbitrary code execution.
47 CVE-2022-27531 125 Exec Code 2022-06-16 2022-06-27
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted TIF file can be forced to read beyond allocated boundaries in Autodesk 3ds Max 2022, and 2021 when parsing the TIF files. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
48 CVE-2022-27530 787 Exec Code Overflow 2022-04-18 2022-04-25
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability. This vulnerability may be exploited to execute arbitrary code.
49 CVE-2022-27529 787 Exec Code 2022-04-18 2022-04-25
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file. This vulnerability may be exploited to execute arbitrary code.
50 CVE-2022-27528 416 Exec Code 2022-04-11 2022-04-19
6.8
None Remote Medium Not required Partial Partial Partial
A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
Total number of vulnerabilities : 139   Page : 1 (This Page)2 3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.