Autodesk AutoCAD Electrical

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.

Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

JPG File Parsing Heap-Based Overflow Vulnerability

Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write beyond the allocated heap buffer. This vulnerability could lead to arbitrary code execution.

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products

Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

DWG File Parsing Out-of-Bounds Write Vulnerability

SLDPRT File Parsing Memory Corruption Vulnerability

SLDPRT File Parsing Memory Corruption Vulnerability

CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability

3DM File Parsing Use-After-Free Vulnerability

DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD

CATPRODUCT File Parsing Heap-Based Overflow Vulnerability

X_T File Parsing Out-of-Bounds Write Vulnerability

MODEL File Parsing Memory Corruption Vulnerability

CATPART File Parsing Out-of-Bounds Write Vulnerability

CATPRODUCT File Parsing Out-of-Bounds Read Vulnerability

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

MODEL File Parsing Out-of-Bounds Write Vulnerability

MODEL File Parsing Out-of-Bounds Write Vulnerability

PRT File Parsing Out-of-Bounds Read Vulnerability

PRT File Parsing Out-of-Bounds Read Vulnerability

CATPART File Parsing Out-of-Bounds Read Vulnerability

MODEL File Parsing Out-of-Bounds Write Vulnerability

CATPART File Parsing Memory Corruption Vulnerability