utodesk® AutoCAD®, Advance Steel and Civil 3D® vulnerabilities
We track 4 vulnerabilities in utodesk® AutoCAD®, Advance Steel and Civil 3D® products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2022.
Latest utodesk® AutoCAD®, Advance Steel and Civil 3D® vulnerabilities
- 7.8 High severity
utodesk® AutoCAD®, Advance Steel and Civil 3D®: Out-of-bounds Write
A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context o
- 7.8 High severity
utodesk® AutoCAD®, Advance Steel and Civil 3D®: Improper Handling of Exceptional Conditions
A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process.
- 7.8 High severity
utodesk® AutoCAD®, Advance Steel and Civil 3D®: Out-of-bounds Write
A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code execution.
- 7.5 High severity
utodesk® AutoCAD®, Advance Steel and Civil 3D®: Out-of-bounds Read
Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.