Users of Autodesk Moldflow Communicator versions 2022 and earlier

Users of Autodesk Design Review versions 2018 Hotfix 5 and earlier Users of Autodesk Subassembly Composer 2020 versions 2020.6.2 and earlier Users of Autodesk Subassembly Composer 2021 versions 2021.3.1 and earlier Users of Autodesk Subassembly Composer 2022 versions 2022.2.0 and earlier Users of Autodesk Subassembly Composer 2023 versions 2023.0 and earlier Users of Autodesk AutoCAD versions 2020.1.5 and earlier Users of Autodesk AutoCAD versions 2021.1.2 and earlier Users of Autodesk AutoCAD versions 2022.1.2 and earlier Users of Autodesk AutoCAD versions 2023.1.0 and earlier Due to the severity of these vulnerabilities, we suggest users apply the Autodesk patches as soon as possible. All of these vulnerabilities have different root causes pertaining to the decoding of several file formats by the vulnerable Autodesk product. Recently, Autodesk released several security patches, security patches, security patches, security patches & security patches which fixed them.

Late May 2022, I discovered and reported multiple zero-day vulnerabilities in Autodesk Design Review, Autodesk Subassembly Composer, Autodesk Moldflow Communicator, and Autodesk Dwg2Spd.

Autodesk design review 2022