Autodesk Autocad Advance Steel vulnerabilities

62 CVEs affecting Autodesk Autocad Advance Steel, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9997, published 2024-10-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33884, published 2022-10-03. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code…
CVE-2023-29073, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a…
CVE-2023-29075, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read…
CVE-2023-29074, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash,…
CVE-2023-29076, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other…
CVE-2022-33886, published 2022-10-03. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability…
CVE-2022-33885, published 2022-10-03. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code…
CVE-2021-40164, published 2022-10-07. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
CVE-2021-40166, published 2022-10-07. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by…
CVE-2021-40165, published 2022-10-07. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer while parsing TIFF, PICT, TGA, or RLC files. This…

Latest

CVE-2024-9997, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash,…
CVE-2024-9996, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash,…
CVE-2024-9827, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-9826, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write…
CVE-2024-9489, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write…
CVE-2024-8896, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8600, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8599, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8598, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8597, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…