Autodesk security advisories

Autodesk desktop applications utilizing the Autodesk Installer have been affected by an insecure temporary file vulnerability that allows a non-admin user to escalate their privileges. Exploitation of this vulnerability can lead to code execution.

Autodesk VRED Design is affected by an untrusted search path vulnerability listed below. Exploitation of this vulnerability may lead to code execution.

Autodesk AutoCAD and certain Autodesk desktop products are affected by Out-of-Bounds Write and Stack-based Buffer Overflow vulnerabilities. Exploitation of these vulnerabilities may lead to code execution.

Autodesk AutoCAD and certain AutoCAD-based products are affected by the vulnerability listed below. Exploitation of this vulnerability may lead to code execution.

Autodesk AutoCAD and certain AutoCAD-based products are affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities may lead to code execution.

Autodesk Revit is affected by a PDF file parsing vulnerability. Exploitation of this vulnerability requires user interaction and may lead to remote code execution.

Autodesk Revit is affected by a file parsing vulnerability. Exploitation of this vulnerability requires user interaction and may lead to remote code execution.

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices.

Autodesk Navisworks is affected by multiple vulnerabilities listed below. Exploitation of these vulnerabilities may lead to remote code execution.

Autodesk AutoCAD and certain AutoCAD-based products are affected by an Out-of-Bounds Write vulnerability. Exploitation of this vulnerability may lead to code execution.

Autodesk Revit is affected by a Stack-based Overflow vulnerability. Exploitation of this vulnerability requires user interaction and may lead to code execution.

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes ar

A Python-based exploit has been identified in Autodesk Maya and a free plugin is now available in the Autodesk App Store to help detect and resolve potential issues caused by this malicious code. Exploitation of this vulnera

Autodesk AutoCAD and certain AutoCAD-based products are affected by Out-of-Bounds Write, Out-of-Bounds Read, Heap-based Overflow, Use-After-Free, Memory Corruption, and Uninitialized Variable vulnerabilities. Exploitation of

Autodesk AutoCAD and certain AutoCAD-based products are being affected by Out-of-Bounds Write, Out-of-Bounds Read, Heap based Overflow, Stack-based Overflow, Use-After-Free, Memory Corruption, Double Free, and Uninitialized

Autodesk’s InfraWorks has been affected by third-party component vulnerabilities. Exploitation of these vulnerabilities could lead to remote code execution and/or denial-of-service to the software and user devices.

Autodesk is aware of the XZ security vulnerabilities. Refer to our security advisory for a comprehensive list of potentially impacted Autodesk products and services, along with our current recommendations.

Autodesk DWG TrueView product has been affected by Stack-based Overflow vulnerability.

Applications and services utilizing the Autodesk FBX Review software have been affected by an Out-Of-Bounds Write vulnerability. Exploitation of these vulnerabilities may lead to code execution.

Autodesk AutoCAD and certain AutoCAD-based products may be affected by Out-of-Bounds write, Stack-based Overflow, Heap based Overflow, Use-After-Free, Memory Corruption, Untrusted Pointer Dereference, Heap-based Buffer Overf

Autodesk Desktop Licensing Service has been affected by a reachable assertion vulnerability detailed below. Exploitation of this vulnerability could lead to denial of service due to multiple assertions.

ZDI published zero-day vulnerabilities on February 12th for versions of Autodesk AutoCAD products. Fixes for these vulnerabilities will be issued for affected versions of AutoCAD in an upcoming release. Please note, this adv

Autodesk InfraWorks has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes ar

Applications and Services that utilize Autodesk Design Review and AutoCAD products may be affected by Heap Based Overflow and Memory Corruption vulnerabilities. Exploitation of these vulnerabilities could lead to remote code

Multiple Autodesk AutoCAD, AutoCAD-based products, and Maya have been affected by Out-of-bound Read, Out-of-bound Write, Use of Uninitialized Variable, Heap based Buffer Overflow, and Memory Corruption vulnerabilities.

Autodesk products leveraging internal components, Autodesk Material Management and thus implicitly importing vulnerable versions expat and libcurl may be impacted by Out-of-bound Read, User-After-Free, NULL Pointer Dereferen

Autodesk products and dependent application, services using OpenSSL component may be impacted by Loop with Unreachable Exit Condition ('Infinite Loop') vulnerabilities. Exploitation of these vulnerabilities may lead to code

Autodesk® desktop app (ADA) product have been affected by Improper Privilege Management vulnerability detailed below. Exploitation of these vulnerabilities may lead to code execution and/or denial-of-service to the software

Multiple Autodesk products have been affected by Out-of-bound Read vulnerability.

Autodesk® Fusion 360® has been affected by XML External Entities (XXE) vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

Applications and Services that utilize versions of PDFTron prior to 9.1.17 may be impacted by Heap-based Buffer Overflow, and Untrusted Pointer Dereference vulnerabilities.

Applications and services that utilize Autodesk 3ds Max may be affected by Out-of-bound Read/Write vulnerabilities. Exploitation of these vulnerabilities may lead to remote code execution.

Applications and Services that utilize Autodesk Design Review may be affected by Double Free, and Out-of-bound Read/Write vulnerabilities. Exploitation of these vulnerabilities could lead to remote code execution.

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes

Applications and Services that utilize certain Autodesk products are affected by Out-of-bounds Read, Out-of-bounds Write, untrusted pointer Dereference, and memory corruption vulnerabilities. Exploitation of these vulnerabil

Applications and services utilizing the Autodesk FBX Review have been affected by an Out-Of-Bounds Read vulnerability. Exploitation of these vulnerabilities may lead to code execution and/or denial-of-service.

Multiple Autodesk products have been affected by Use After Free, Out-of-bound-write, Stack-based Buffer, Memory Corruption, and Buffer Overflow vulnerabilities.

Applications and services that utilize Autodesk Design Review, Advance Steel, Civil 3D® and AutoCAD products may be affected by Double Free, Heap Overflow, Out-of-bound Read/Write, Use-After-Free, and Type Confusion vulnerab

Applications and Services that utilize the Log4net.dll earlier than 2.0.10 version can be impacted by Improper Restriction of XML External Entity Reference ('XXE') vulnerabilities.

Applications and Services that utilize certain Autodesk products may be affected by Out-of-bounds Read, Out-of-bounds Write, and Information disclosure vulnerabilities. Exploitation of these vulnerabilities in conjunction wi

Autodesk® InfraWorks® has been affected by multiple vulnerabilities detailed below. Exploitation of these vulnerabilities may lead to remote code execution and/or denial-of-service to the software and user devices. Hotfixes