Heap overflow

2023-11-2303:15:00

PRIOn knowledge base

www.prio-n.com

malicious actor

buffer overflow

sensitive data

arbitrary code

nvd

autodesk autocad

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.2%

JSON

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

CPENameOperatorVersion
autocadge2024.0.0
autocadlt2024.1.1
autocadge2023.0.0
autocadlt2023.1.4
autocadlt2024.1
autocad_advance_steellt2023.1.4
autocad_advance_steelge2024.0.0
autocad_advance_steellt2024.1.1
autocad_architecturege2024.0.0
autocad_architecturelt2024.1.1

Name	Operator	Version
autocad	ge	2024.0.0
autocad	lt	2024.1.1
autocad	ge	2023.0.0
autocad	lt	2023.1.4
autocad	lt	2024.1
autocad_advance_steel	lt	2023.1.4
autocad_advance_steel	ge	2024.0.0
autocad_advance_steel	lt	2024.1.1
autocad_architecture	ge	2024.0.0
autocad_architecture	lt	2024.1.1