7.8
High
CVE-2024-23138 A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow
Description
A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Architecture 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Architecture 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
Show the 72 other branches Hide the 72 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD Electrical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Electrical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Electrical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Mechanical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Mechanical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MEP 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MEP 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Plant 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Plant 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Civil 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Civil 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Civil 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Civil 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Advance Steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Advance Steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Advance Steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Advance Steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MAP 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MAP 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD LT 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD LT 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD LT 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD LT 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Mac 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Mac 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Mac 2022 | 2022 → < 2022.4.1 | 2022.4.1 |
| AutoCAD LT for Mac 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD LT for Mac 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD LT for Mac 2022 | 2022 → < 2022.4.1 | 2022.4.1 |
| DWG TrueView 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| DWG TrueView 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| DWG TrueView 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_civil_3d 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_civil_3d 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_civil_3d 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_civil_3d 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_mechanical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_mechanical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_mechanical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_mechanical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_plant_3d 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_plant_3d 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_plant_3d 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_plant_3d 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_electrical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_electrical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_electrical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_electrical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_map_3d 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_map_3d 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_map_3d 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_map_3d 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_advance_steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_advance_steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_advance_steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_advance_steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_architecture 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_architecture 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_architecture 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_architecture 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_mep 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_mep 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_mep 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_mep 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
Other CVEs of AutoCAD
The 109 CVEs of AutoCAD →
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
High
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
High