Vulnerabilities > Autodesk > Advance Steel

DATE CVE VULNERABILITY TITLE RISK
2022-06-21 CVE-2022-27871 Allocation of Resources Without Limits or Throttling vulnerability in Autodesk products
Autodesk AutoCAD product suite, Revit, Design Review and Navisworks releases using PDFTron prior to 9.1.17 version may be used to write beyond the allocated buffer while parsing PDF files.
network
autodesk CWE-770
6.8
2022-04-19 CVE-2022-25788 Out-of-bounds Write vulnerability in Autodesk products
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files.
network
autodesk CWE-787
6.8
2022-04-18 CVE-2022-27529 Out-of-bounds Write vulnerability in Autodesk products
A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated buffer while parsing PICT, BMP, PSD or TIF file.
network
autodesk CWE-787
6.8
2022-04-18 CVE-2022-27530 Out-of-bounds Write vulnerability in Autodesk products
A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through Buffer overflow vulnerability.
network
autodesk CWE-787
6.8
2022-04-11 CVE-2022-25789 Use After Free vulnerability in Autodesk products
A maliciously crafted DWF, 3DS and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to trigger use-after-free vulnerability.
network
autodesk CWE-416
6.8
2022-04-11 CVE-2022-25790 Out-of-bounds Write vulnerability in Autodesk products
A maliciously crafted DWF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated boundaries when parsing the DWF files.
network
autodesk CWE-787
6.8
2022-04-11 CVE-2022-25791 Out-of-bounds Write vulnerability in Autodesk products
A Memory Corruption vulnerability for DWF and DWFX files in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 may lead to code execution through maliciously crafted DLL files.
4.4
2022-04-11 CVE-2022-25792 Out-of-bounds Write vulnerability in Autodesk products
A maliciously crafted DXF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 and Autodesk Navisworks 2022 can be used to write beyond the allocated buffer through Buffer overflow vulnerability.
network
autodesk CWE-787
6.8
2022-01-25 CVE-2021-40158 Out-of-bounds Read vulnerability in Autodesk products
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file.
local
low complexity
autodesk CWE-125
7.8
2022-01-25 CVE-2021-40159 Information Exposure vulnerability in Autodesk products
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.
local
low complexity
autodesk CWE-200
7.8