CVE-2024-9489: Improper Restriction of Operations within the Bounds of a Memory Buffer

A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8896: Use of Uninitialized Resource

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk AutoCAD that originates from a memory corruption vulnerability that may be triggered when parsing a maliciously crafted CATPART file in...

CVE-2024-8588: Out-of-bounds Read

A maliciously crafted SLDPRT file when parsed in odxswdll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-9826: Use After Free

A maliciously crafted 3DM file when parsed in atfapi.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a set of professional 3D drawing software from the American Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD, which can be exploited by an attacker to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD that originates from an out-of-bounds read when parsing a maliciously constructed CATPART file, which can be exploited to cause a crash, read...

CVE-2024-8598: Improper Restriction of Operations within the Bounds of a Memory Buffer

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8594: Heap-based Buffer Overflow

A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

Autodesk AutoCAD 安全漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US company Autodesk. A security vulnerability exists in Autodesk AutoCAD that originates from a maliciously crafted DWG file that may force a stack-based buffer overflow when parsed, which can be exploited by an attacker to...

PT-2024-38741 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DWG file can cause a Stack-based Buffer Overflow when parsed through Autodesk AutoCAD and certain AutoCAD-based products. This issue can be leveraged by a...

The vulnerability of the ODXSW_DLL.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to disclose protected information, execute arbitrary code, or cause service interruptions.

The vulnerability of the ODXSWDLL.dll library, which is used in AutoCAD modeling, design, and drawing software, relates to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information, execute arbitrary code, or cause a service...

PT-2024-7537 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability in the acdb25.dll library of Autodesk AutoCAD, which can be exploited by parsing a maliciously crafted DWG file. This c...

PT-2024-7536 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Memory Corruption vulnerability that can be triggered by a maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD. This can allow a...

PT-2024-7530 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an Out-of-Bounds Read vulnerability that can be triggered by a maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD. This can...

PT-2024-7529 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Use-After-Free vulnerability in the atf api.dll library of Autodesk AutoCAD, which can be triggered by parsing a maliciously crafted 3DM file. This can...

PT-2024-7535 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to the use of an uninitialized variable in the acdb25.dll library of Autodesk AutoCAD. This can be exploited by a malicious actor using a specially crafted DXF...

Autodesk AutoCAD 25.0.x < 25.0.101.0 (2025.1) (adsk-sa-2024-0014)

The version of Autodesk AutoCAD installed on the remote host is prior to 25.0.101.0 2025.1. It is, therefore, affected by a vulnerability as referenced in the adsk-sa-2024-0014 advisory. - A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, can force an Out-of-...

PT-2024-7524 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to an out-of-bounds write vulnerability in the ASMKERN230A.dll library of Autodesk AutoCAD, which can be exploited through a specially crafted CATPART file. Th...

PT-2024-7533 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a Use-After-Free vulnerability in the libodxdll.dll library when parsing a maliciously crafted MODEL file in Autodesk AutoCAD. This can be exploited by a...