Autodesk Autocad Mechanical vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Autodesk Autocad Mechanical: 9 record(s), with affected versions and fixes.cpe:2.3:a:autodesk:autocad_mechanical
CVE-2026-7406
High · 7.8
CWE-822 Aug 6, 2026
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
CVE-2026-7405
Medium · 5.5
CWE-125 Aug 6, 2026
TIF File Parsing Out-of-Bounds Read in certain Autodesk products
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an Out-of-Bounds Read in the image handling library. A malicious actor can leverage this vulnerability to cause a denial of service
CVE-2026-17550
Medium · 5.5
CWE-125 Jul 29, 2026
DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
CVE-2026-16465
High · 7.1
CWE-125 Jul 29, 2026
DWG or DXF File Parsing Out-of-Bounds Read in Autodesk AutoCAD
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
CVE-2026-16463
High · 7.8
CWE-122 Jul 29, 2026
DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD
A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2023-41139
High · 7.8
CWE-119 Nov 23, 2023
Buffer Errors (Improper Restriction of Operations within Memory Bounds) in Autodesk Autocad
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
CVE-2022-25788
High · 7.8
CWE-787 Apr 19, 2022
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated...
A maliciously crafted JT file in Autodesk AutoCAD 2022 may be used to write beyond the allocated buffer while parsing JT files. This vulnerability can be exploited to execute arbitrary code.
CVE-2021-40159
High · 7.8
CWE-200 Jan 25, 2022
Exposure of Sensitive Information in Autodesk Advance Steel
An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process.
CVE-2021-40158
High · 7.8
CWE-125 Jan 25, 2022
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 may be forced to read...
A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.