CVE-2019-7360
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018,…
- Published
- Updated
- Reserved
- Assigned by
- autodesk
Description
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may trigger a use-after-free, resulting in code execution.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | High7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.6% · top 23% of all CVEs (5 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
Affected products
- affected 2018
Autodesk · Autodesk Advance Steel
- affected 2018
- affected 2018
Autodesk · Autodesk AutoCAD Architecture
- affected 2018
Autodesk · Autodesk AutoCAD Electrical
- affected 2018
Autodesk · Autodesk AutoCAD Map 3D
- affected 2018
Autodesk · Autodesk AutoCAD Mechanical
- affected 2018
Autodesk · Autodesk AutoCAD MEP
- affected 2018
Autodesk · Autodesk AutoCAD P&ID
- affected 2018
Autodesk · Autodesk AutoCAD Plant 3D
- affected 2018
Autodesk · Autodesk AutoCAD LT
- affected 2018
References (1)
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2019-7360)Record last updated .