Autodesk: Security Vulnerabilities
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-11-23
A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-11-23
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score
9.8
EPSS Score
0.01
Published
2023-11-23
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-11-22
Autodesk users who no longer have an active license for an account can still access cases for that account.
CVSS Score
5.3
EPSS Score
0.005
Published
2023-11-22
Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account.
CVSS Score
4.3
EPSS Score
0.005
Published
2023-11-22
A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-06-27
A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.
CVSS Score
7.8
EPSS Score
0.003
Published
2023-06-27
A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-06-27
A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVSS Score
7.8
EPSS Score
0.002
Published
2023-06-27