CVE-2023-41139

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-25)

CWEs

CWE-119, CWE-822

Published

2023-11-23

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• autodesk:autocad
• autodesk:autocad_advance_steel
• autodesk:autocad_architecture
• autodesk:autocad_civil_3d
• autodesk:autocad_electrical
• autodesk:autocad_lt
• autodesk:autocad_map_3d
• autodesk:autocad_mechanical
• autodesk:autocad_mep
• autodesk:autocad_plant_3d

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018

Check your stackJSON