Autodesk Autocad Civil 3d vulnerabilities

65 CVEs affecting Autodesk Autocad Civil 3d, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9997, published 2024-10-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33884, published 2022-10-03. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code…
CVE-2013-3665, published 2013-07-18. Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers to execute arbitrary code via a crafted DWG file.
CVE-2023-29073, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a…
CVE-2023-29075, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read…
CVE-2023-29074, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash,…
CVE-2023-29076, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other…
CVE-2022-33886, published 2022-10-03. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023, 2022, 2021, 2020, and Maya 2023 and 2022. The vulnerability…
CVE-2022-33885, published 2022-10-03. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated buffer. This vulnerability can lead to arbitrary code…
CVE-2021-40164, published 2022-10-07. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute arbitrary code.
CVE-2021-40166, published 2022-10-07. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed while parsing them. This vulnerability may be exploited by…

Latest

CVE-2024-9997, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash,…
CVE-2024-9996, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash,…
CVE-2024-9827, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-9826, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write…
CVE-2024-9489, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write…
CVE-2024-8896, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8600, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8599, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8598, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…
CVE-2024-8597, published 2024-10-29. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a…