Known vulnerabilities in Autodesk Infraworks
Vendor:
Autodesk
Software:
Autodesk Infraworks
Software CPE:
cpe:2.3:a:autodesk:autodesk_infraworks:*:*:*:*:*:*:*:*
Website:
https://www.autodesk.com/
Total vulnerabilities:
88
Public exploits:
12
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2026.3
2026.2
2026.1
2026.0
2022.1.10.363
2023.1.5.251
2024.1.4.152
2025.02.86
2021.2 Hotfix 9
2023.1 Hotfix 1
2023.0.2
2023.0.1 Hotfix 1
2023.0.1
2022.1.5 Hotfix 5
2022.1.5
2021.2 Hotfix 7
2020.2 Hotfix 7
2022.1 Hotfix 4
2022.1 Hotfix 3
2022.1 Hotfix 1
2021.2 Hotfix 6
2021.2 Hotfix 5
2021.2 Hotfix 3
2021.2 Hotfix 2
2021.2 Hotfix 1
2020.2 Hotfix 6
2020.2 Hotfix 5
2020.2 Hotfix 3
2020.2 Hotfix 2
2020.2 Hotfix 1
2019.3 Hotfix 5
2020.2 Hotfix 4
2021.2 Hotfix 4
2022.0 Hotfix 3
2022.1 Hotfix 2
2019.3
2020.2
2021.2
2022.1
2022.0
Vulnerabilities (88)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113728 - Out-of-bounds write CVE-2025-7675 |
CWE-787 | High | 2026.3 | 07.08.2025 |
SB2025080701 |
||
| #VU113727 - Out-of-bounds write CVE-2025-7497 |
CWE-787 | High | 2026.3 | 07.08.2025 |
SB2025080701 |
||
| #VU113726 - Out-of-bounds write CVE-2025-6637 |
CWE-787 | High | 2026.3 | 07.08.2025 |
SB2025080701 |
||
| #VU113725 - Use After Free CVE-2025-6636 |
CWE-416 | High | 2026.3 | 07.08.2025 |
SB2025080701 |
||
| #VU113724 - Out-of-bounds read CVE-2025-6635 |
CWE-125 | Medium | 2026.3 | 06.08.2025 |
SB2025080701 |
||
| #VU113723 - Out-of-bounds write CVE-2025-6631 |
CWE-787 | High | 2026.3 | 06.08.2025 |
SB2025080701 |
||
| #VU113722 - Heap-based Buffer Overflow CVE-2025-5043 |
CWE-122 | High | 2026.3 | 06.08.2025 |
SB2025080701 |
||
| #VU113721 - Memory corruption CVE-2025-5038 |
CWE-119 | High | 2026.3 | 06.08.2025 |
SB2025080701 |
||
| #VU96019 - Resource exhaustion CVE-2024-38808 |
CWE-400 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 14.08.2024 |
SB2024081480 SB2024092018 SB2024100315 and 24 more |
||
| #VU95131 - Out-of-bounds read CVE-2024-7264 |
CWE-125 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 01.08.2024 |
SB2024080110 SB2024080117 SB20240805104 and 43 more |
||
| #VU94715 - Double Free CVE-2024-6197 |
CWE-415 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 24.07.2024 |
SB2024072431 SB2024080568 SB20240806402 and 11 more |
||
| #VU91288 - Improper Control of Generation of Code ('Code Injection') CVE-2024-32465 |
CWE-94 | High | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 07.06.2024 |
SB2024060720 SB2024060721 SB2024060723 and 44 more |
||
| #VU91287 - UNIX Symbolic Link (Symlink) Following CVE-2024-32021 |
CWE-61 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 07.06.2024 |
SB2024060720 SB2024060721 SB2024060723 and 44 more |
||
| #VU91286 - UNIX Hard Link CVE-2024-32020 |
CWE-62 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 07.06.2024 |
SB2024060720 SB2024060721 SB2024060723 and 43 more |
||
| #VU89491 - Unrestricted Upload of File with Dangerous Type CVE-2024-32002 |
CWE-434 | High | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 15.05.2024 |
SB2024051504 SB2024060720 SB2024060721 and 52 more |
||
| #VU89490 - Improper Control of Generation of Code ('Code Injection') CVE-2024-32004 |
CWE-94 | High | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 15.05.2024 |
SB2024051503 SB2024060720 SB2024060721 and 51 more |
||
| #VU89429 - Improper input validation CVE-2024-31755 |
CWE-20 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 14.05.2024 |
SB2024051431 SB2024092634 SB2024092638 and 4 more |
||
| #VU87163 - Memory corruption CVE-2024-25580 |
CWE-119 | Medium | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 06.03.2024 |
SB2024030642 SB2024030649 SB2024030650 and 15 more |
||
| #VU86052 - Use After Free CVE-2024-25062 |
CWE-416 | High | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 05.02.2024 |
SB2024020507 SB2024020508 SB2024020742 and 115 more |
||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | 2022.1.10.363, 2023.1.5.251, 2024.1.4.152, 2025.02.86 | 08.06.2023 |
SB2023060849 SB2023071712 SB2023072512 and 157 more |
Showing elements 1 - 20 out of 88