vulnerability

AutoDesk AutoCAD: CVE-2023-41139: Security Advisory for Autodesk AutoCAD, Advance Steel and Civil 3D

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:S/C:C/I:C/A:C)

Published

Aug 24, 2023

Added

Jul 1, 2025

Modified

May 29, 2026

Description

CVE-2023-41139 - A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024, 2023, 2022 and 2021 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Solution

autodesk-autocad-upgrade-latest

References

CVE-2023-41139
https://attackerkb.com/topics/CVE-2023-41139
https://www.cve.org/CVERecord?id=CVE-2023-41139
https://www.autodesk.com/trust/security-advisories/ADSK-SA-2023-0018
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-45658
CWE-822
CWE-119
EUVD-EUVD-2023-45658

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report