CVE-2023-27913: Autodesk Autocad

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process.

Affected products

  • Autodesk Autocad: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Advance Steel: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Architecture: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Civil 3d: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Electrical: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Lt: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Map 3d: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Mechanical: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Mep: from 2023, before 2023.1.3 (fixed in 2023.1.3)
  • Autodesk Autocad Plant 3d: from 2023, before 2023.1.3 (fixed in 2023.1.3)

Published 2023-04-14. Last modified 2026-06-17.