Every CVE whose affected-product data names Autodesk Autocad Lt, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (79)
CVE-2023-29076 — CVSS 9.8 (critical): A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption…
CVE-2023-29074 — CVSS 9.8 (critical): A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A…
CVE-2023-29075 — CVSS 9.8 (critical): A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious…
CVE-2023-29073 — CVSS 9.8 (critical): A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A…
CVE-2019-7361 — CVSS 7.8 (high): An attacker may convince a victim to open a malicious action micro (.actm) file that has serialized data, which may trigger a code…
CVE-2019-7364 — CVSS 7.8 (high): DLL preloading vulnerability in versions 2017, 2018, 2019, and 2020 of Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD…
CVE-2021-27041 — CVSS 7.8 (high): A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. This vulnerability can be…
CVE-2021-27042 — CVSS 7.8 (high): A maliciously crafted DWG file can be used to write beyond the allocated buffer while parsing DWG files. The vulnerability exists because…
CVE-2021-27043 — CVSS 7.8 (high): An Arbitrary Address Write issue in the Autodesk DWG application can allow a malicious user to leverage the application to write in…
CVE-2021-40158 — CVSS 7.8 (high): A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated…
CVE-2021-40159 — CVSS 7.8 (high): An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities…
CVE-2021-40160 — CVSS 7.8 (high): PDFTron prior to 9.0.7 version may be forced to read beyond allocated boundaries when parsing a maliciously crafted PDF file. This…
CVE-2021-40161 — CVSS 7.8 (high): A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through PDFTron earlier than 9.0.7…
CVE-2021-40162 — CVSS 7.8 (high): A maliciously crafted TIF, PICT, TGA, or RLC files in Autodesk Image Processing component may be forced to read beyond allocated boundaries…
CVE-2021-40163 — CVSS 7.8 (high): A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files through Autodesk Image Processing…
CVE-2021-40164 — CVSS 7.8 (high): A heap-based buffer overflow could occur while parsing TIFF, PICT, TGA, or RLC files. This vulnerability may be exploited to execute…
CVE-2021-40165 — CVSS 7.8 (high): A maliciously crafted TIFF, PICT, TGA, or RLC file in Autodesk Image Processing component may be used to write beyond the allocated buffer…
CVE-2021-40166 — CVSS 7.8 (high): A maliciously crafted PNG file in Autodesk Image Processing component may be used to attempt to free an object that has already been freed…
CVE-2022-25788 — CVSS 7.8 (high): A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This…
CVE-2022-25789 — CVSS 7.8 (high): A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free…
CVE-2022-25790 — CVSS 7.8 (high): A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the…
CVE-2022-25791 — CVSS 7.8 (high): A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead…
CVE-2022-25792 — CVSS 7.8 (high): A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the…
CVE-2022-27529 — CVSS 7.8 (high): A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated…
CVE-2022-27530 — CVSS 7.8 (high): A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through…
CVE-2022-27871 — CVSS 7.8 (high): Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write…
CVE-2022-33881 — CVSS 7.8 (high): Parsing a maliciously crafted PRT file can force Autodesk AutoCAD 2023 to read beyond allocated boundaries. This vulnerability in…
CVE-2022-33885 — CVSS 7.8 (high): A maliciously crafted X_B, CATIA, and PDF file when parsed through Autodesk AutoCAD 2023 and 2022 can be used to write beyond the allocated…
CVE-2022-33886 — CVSS 7.8 (high): A maliciously crafted MODEL and SLDPRT file can be used to write beyond the allocated buffer while parsing through Autodesk AutoCAD 2023…
CVE-2022-33887 — CVSS 7.8 (high): A maliciously crafted PDF file when parsed through Autodesk AutoCAD 2023 causes an unhandled exception. An attacker can leverage this…
CVE-2022-33888 — CVSS 7.8 (high): A malicious crafted Dwg2Spd file when processed through Autodesk DWG application could lead to memory corruption vulnerability by write…
CVE-2022-33889 — CVSS 7.8 (high): A maliciously crafted GIF or JPEG files when parsed through Autodesk Design Review 2018, and AutoCAD 2023 and 2022 could be used to write…
CVE-2022-33890 — CVSS 7.8 (high): A maliciously crafted PCT or DWF file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-41309 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-41310 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42933 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42934 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42935 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42936 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42937 — CVSS 7.8 (high): A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42938 — CVSS 7.8 (high): A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This…
CVE-2022-42939 — CVSS 7.8 (high): A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This…
CVE-2022-42940 — CVSS 7.8 (high): A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This…
CVE-2022-42941 — CVSS 7.8 (high): A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42942 — CVSS 7.8 (high): A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42943 — CVSS 7.8 (high): A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2022-42944 — CVSS 7.8 (high): A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by…
CVE-2023-25003 — CVSS 7.8 (high): A maliciously crafted pskernel.dll file in Autodesk AutoCAD 2023 and Maya 2022 may be used to trigger out-of-bound read write / read…
CVE-2023-25004 — CVSS 7.8 (high): A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these…
CVE-2023-27912 — CVSS 7.8 (high): A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage…
CVE-2023-27913 — CVSS 7.8 (high): A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor…
CVE-2023-27914 — CVSS 7.8 (high): A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a…
CVE-2023-27915 — CVSS 7.8 (high): A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access…
CVE-2023-29067 — CVSS 7.8 (high): A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access…
CVE-2023-29068 — CVSS 7.8 (high): A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in…
CVE-2025-8894 — CVSS 7.8 (high): A maliciously crafted PDF file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious…
CVE-2019-7358 — CVSS 7.8 (high): An exploitable heap overflow vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk…
CVE-2019-7359 — CVSS 7.8 (high): An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018…
CVE-2019-7360 — CVSS 7.8 (high): An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018…
CVE-2025-5046 — CVSS 7.8 (high): A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious…
CVE-2025-5047 — CVSS 7.8 (high): A maliciously crafted DGN file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability. A malicious actor…
CVE-2025-5048 — CVSS 7.8 (high): A maliciously crafted DGN file, when linked or imported into Autodesk AutoCAD, can force a Memory Corruption vulnerability. A malicious…
CVE-2025-8893 — CVSS 7.8 (high): A maliciously crafted PDF file, when parsed through certain Autodesk products, can force an Out-of-Bounds Write vulnerability. A malicious…
CVE-2023-41139 — CVSS 7.8 (high): A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This…
CVE-2023-41140 — CVSS 7.8 (high): A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A…
CVE-2024-23138 — CVSS 7.8 (high): A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can…
CVE-2024-7305 — CVSS 7.8 (high): A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A…
CVE-2024-7991 — CVSS 7.8 (high): A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write…
CVE-2024-7992 — CVSS 7.8 (high): A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer…
CVE-2024-8896 — CVSS 7.8 (high): A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A…
CVE-2024-9489 — CVSS 7.8 (high): A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious…
CVE-2024-9996 — CVSS 7.8 (high): A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A…
CVE-2024-9997 — CVSS 7.8 (high): A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious…
CVE-2025-1275 — CVSS 7.8 (high): A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability…
CVE-2025-1276 — CVSS 7.8 (high): A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A…
CVE-2022-33884 — CVSS 7.5 (high): Parsing a maliciously crafted X_B file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in…
CVE-2013-3665 — CVSS 6.8 (medium): Unspecified vulnerability in Autodesk AutoCAD through 2014, AutoCAD LT through 2014, and DWG TrueView through 2014 allows remote attackers…
CVE-2005-4710 — CVSS 4.6 (medium): Unspecified vulnerability in multiple Autodesk and AutoCAD products and product families from 2006 and earlier allows remote attackers to…
CVE-2021-27040 — CVSS 3.3 (low): A maliciously crafted DWG file can be forced to read beyond allocated boundaries when parsing the DWG file. This vulnerability can be…