CVE-2019-7360
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018,…
- 7.8HighCVSS base score
- 1.6%Exploitation in 30 daysEPSS · top 23% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
An exploitable use-after-free vulnerability in the DXF-parsing functionality in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file may trigger a use-after-free, resulting in code execution.
Timeline
ID reserved
By autodesk
- 2 months later
· 2 months later
Published
- 5 years later
· 5 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 3.0 | High7.8 | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.6% · top 23% of all CVEs (11 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected 2018
Autodesk · Autodesk Advance Steel
- affected 2018
- affected 2018
Autodesk · Autodesk AutoCAD Architecture
- affected 2018
Autodesk · Autodesk AutoCAD Electrical
- affected 2018
Autodesk · Autodesk AutoCAD Map 3D
- affected 2018
Autodesk · Autodesk AutoCAD Mechanical
- affected 2018
Autodesk · Autodesk AutoCAD MEP
- affected 2018
Autodesk · Autodesk AutoCAD P&ID
- affected 2018
Autodesk · Autodesk AutoCAD Plant 3D
- affected 2018
Autodesk · Autodesk AutoCAD LT
- affected 2018
References
References1
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001 (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2019-16902 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2019-7360)Record last updated .