CVE-2024-23145 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23145

CVE-2024-23145 relates to Autodesk AutoCAD parsing of PRT files via opennurbs.dll, causing an Out-of-Bounds Read that can crash, expose data, or allow arbitrary code execution. Affected context: AutoCAD with PRT parsing through opennurbs.dll; exploit path relies on processing a crafted PRT file. ...

CVE-2024-23143

A maliciously crafted 3DM, MODEL and XB file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary co...

CVE-2024-23142

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atfdwgconsumer.dll, rosex64vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23141

A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23143

A maliciously crafted 3DM, MODEL and XB file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary co...

CVE-2024-23144

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

CVE-2024-23140

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atfapi.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current...

CVE-2024-23144 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

CVE-2024-23144

CVE-2024-23144 is an Autodesk AutoCAD vulnerability tied to parsing a malicious CATPART file in CC5Dll.dll and ASMBASE228A.dll. The issue is described as an Out-of-Bounds Write that can cause a crash, data corruption, or arbitrary code execution in the context of the affected process. The CVE’s s...

CVE-2024-23144 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

CVE-2024-23143

Autodesk AutoCAD AutoCAD Desktop Software is affected by CVE-2024-23143 due to parsing maldocs in 3DM, MODEL and X_B files. The root cause is improper validation when parsed by ASMkern229A.dll and ASMBASE229A.dll, leading to Out-of-Bounds Read and/or Out-of-Bounds Write. Consequences documented i...

CVE-2024-23141

Autodesk AutoCAD is affected by CVE-2024-23141 due to parsing of a malicious MODEL file in libodxdll, which can cause a double-free and enable code execution in the current process. The CVSSv3.1 base score is 7.8 (HIGH) with Local attack, no privileges required, but user interaction needed; impac...

CVE-2024-23140 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atfapi.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current...

CVE-2024-23140

The CVE-2024-23140 entry concerns Autodesk AutoCAD components responsible for parsing 3DM and MODEL files. A maliciously crafted 3DM or MODEL file can trigger an Out-of-Bounds Read when processed by opennurbs.dll and atf_api.dll, potentially allowing a crash, reading of sensitive data, or executi...

CVE-2024-23140 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atfapi.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current...

CVE-2024-23145: Out-of-bounds Read

A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process...

PT-2024-19691

Name of the Vulnerable Software and Affected Versions Autodesk applications affected versions not specified Description A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption issue by write access violation. This issue, in...

CVE-2024-23140: Out-of-bounds Read

A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atfapi.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current...

CVE-2024-23157: Out-of-bounds Write

A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSWDLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...