CVE-2023-41139CWE-822

CVE-2023-41139: vulnerability in Autodesk AutoCAD, Advance Steel and Civil 3D

Published · Updated

Follow this CVE+ Monitor AutoCAD+ Monitor Civil

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.3%
A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected products
Autodesk · AutoCAD, Advance Steel and Civil 3D
Related CVEs — Autodesk AutoCAD, Advance Steel and Civil 3D

In the same product, most dangerous first.

CVE-2023-29073—CVE-2023-29073EPSS 1.1%CVE-2023-29075CRITICALCVE-2023-29075EPSS 1.1%CVE-2023-29074—CVE-2023-29074EPSS 1.1%CVE-2023-29076—CVE-2023-29076EPSS 1.1%CVE-2023-41140—CVE-2023-41140EPSS 0.3%