autocad mep vulnerabilities and fixes

Recent CVEs affecting autocad mep, with upgrade or downgrade steps. 42 tracked.

Also searched as: autocadmep.

autocad mep has 42 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 41. Most recent: 2025-04-15. Highest priority: CVE-2024-23147 (score 37/100).

• CVE-2025-1652 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulner
• CVE-2025-1651 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulner
• CVE-2025-1650 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variab
• CVE-2025-1649 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variab
• CVE-2025-1433 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulner
• CVE-2025-1432 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability
• CVE-2025-1431 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulne
• CVE-2025-1430 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnera
• CVE-2025-1429 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulner
• CVE-2025-1428 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vuln
• CVE-2025-1427 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variab
• CVE-2025-1275 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-B
• CVE-2024-8587 HIGH 7.8 DOWNGRADE DOWNGRADE A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based
• CVE-2024-37007 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a
• CVE-2024-37006 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a
• CVE-2024-37005 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of
• CVE-2024-37004 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a u
• CVE-2024-37003 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk app
• CVE-2024-37002 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to
• CVE-2024-37001 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cau
• CVE-2024-37000 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memor
• CVE-2024-36999 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-o
• CVE-2024-23159 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be use
• CVE-2024-23158 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used t
• CVE-2024-23157 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can l
• CVE-2024-23156 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications
• CVE-2024-23155 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be u
• CVE-2024-23154 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to
• CVE-2024-23153 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of
• CVE-2024-23152 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-o
• CVE-2024-23151 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-B
• CVE-2024-23150 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bou
• CVE-2024-23149 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Ou
• CVE-2024-23148 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a
• CVE-2024-23147 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autode
• CVE-2024-23146 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may forc
• CVE-2024-23145 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-o
• CVE-2024-23144 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, ma
• CVE-2024-23143 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Auto
• CVE-2024-23142 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and
• CVE-2024-23141 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double f
• CVE-2024-23140 HIGH 7.8 UPGRADE UPGRADE A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applic

FAQ

How do I fix autocad mep vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is autocad mep being exploited right now?

None of the tracked autocad mep CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which autocad mep CVE should I patch first?

CVE-2024-23147 currently ranks highest (37/100): A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autode.

RSS feed for autocad mep · ← Back to latest CVEs