CVE-2024-23134: Use After Free

A maliciously crafted IGS file in tbb.dll when parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-23122: Out-of-bounds Write

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-23123: Out-of-bounds Write

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...

Autodesk AutoCAD Buffer Error Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from the American company Autodesk. A security vulnerability exists in Autodesk AutoCAD. An attacker could exploit this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the current process environmen...

CVE-2024-23121: Out-of-bounds Write

A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-23124: Out-of-bounds Write

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-23120

CVE-2024-23120 (and related entries) describe a vulnerability in Autodesk AutoCAD where parsing malicious STP/STEP files via ASMIMPORT228A.dll and ASMIMPORT229A.dll can cause an Out-of-Bounds Write. The weakness is triggered during file parsing of STP/STEP content, potentially leading to a crash,...

Autodesk AutoCAD Buffer Error Vulnerability

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. Autodesk AutoCAD suffers from a buffer error vulnerability that originates from an out-of-bounds write vulnerability when parsing a maliciously compiled STP, CATPART or MODEL file in ASMKERN228A.dll. An attacker...

PT-2024-8205

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted DWG and SLDPRT file can cause a Stack-based Overflow when parsed in opennurbs.dll and ODXSW DLL.dll through Autodesk applications. This can be used to cause a...

PT-2024-7762

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the opennurbs.dll library in Autodesk AutoCAD, which is vulnerable to an out-of-bounds read when parsing specially crafted 3DM files. This can allow an attack...

PT-2024-8051 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a use-after-free vulnerability in the atf dwg consumer.dll, rose x64 vc15.dll, and libodxdll libraries of Autodesk AutoCAD. This vulnerability can be...

CVE-2024-0446: Out-of-bounds Write

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in t...

CVE-2024-23120: Out-of-bounds Write

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the...

PT-2024-7761

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the parsing of maliciously crafted STP files in the stp aim x64 vc15d.dll library through Autodesk applications. This can lead to the use of uninitialized...

PT-2024-8219

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted X B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This issue can...

PT-2024-7766

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to a library called libodx.dll used in Autodesk AutoCAD for modeling, design, and drafting. It involves reading data beyond a specified buffer, which can be...

PT-2024-8047 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free, potentially leading to code execution in the current process. Thi...

PT-2024-8049

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to the parsing of maliciously crafted MODEL files in the ASMkern229A.dll library through Autodesk applications. This can lead to the use of uninitialized...

PT-2024-8050

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM file can cause a Heap-based Overflow when parsed in opennurbs.dll through Autodesk applications. This can be leveraged by a malicious actor to cause a...

PT-2024-8046

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted 3DM, MODEL, and X B file can force an Out-of-Bound Read and/or Out-of-Bound Write when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk...