CVE-2024-37004 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-37003 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSWDLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of...

CVE-2024-37003 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSWDLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of...

CVE-2024-37002 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-37002

CVE-2024-37002 concerns Autodesk AutoCAD: a vulnerability in parsing MODEL files via ASMkern229A.dll that can trigger use of uninitialized memory, potentially enabling code execution in the current process. The issue is tied to Autodesk AutoCAD’s MODEL handling and is described with an impact of ...

CVE-2024-37002 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-37001 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-37001 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-37001

Summary (CVE-2024-37001) : A heap-based overflow in opennurbs.dll when parsing 3DM files through Autodesk AutoCAD can crash the process, read sensitive data, or allow arbitrary code execution. Connected sources attribute this to a boundary/length-check issue in 3DM parsing and identify AutoCAD (d...

CVE-2024-37000 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted XB file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process...

CVE-2024-37000

Autodesk AutoCAD contains a memory-corruption vulnerability (CVE-2024-37000) in the pskernel.DLL when parsing X_B files, leading to code execution in the current process. Affected: AutoCAD desktop software; vulnerable component: pskernel.DLL; trigger: parsing malicious X_B (and related X_B/X_T) f...

CVE-2024-23149 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDDRW file, when parsed in ODXSWDLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23149

CVE-2024-23149 affects Autodesk AutoCAD and involves parsing malicious SLDDRW files in the ODXSW_DLL.dll library. The vulnerability causes an Out-of-Bounds Read, leading to a crash, potential data exposure, or arbitrary code execution in the current process. Public details indicate the issue stem...

CVE-2024-23149 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDDRW file, when parsed in ODXSWDLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23148 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process...

CVE-2024-23148

CVE-2024-23148 affects Autodesk AutoCAD via parsing of CATPRODUCT files in CC5Dll.dll, causing a memory corruption write-access violation that can lead to code execution in the current process. The issue is triggered by crafted CATPRODUCT content and is documented across multiple feeds (NVD, Red ...

CVE-2024-23148 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process...

CVE-2024-23147 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted CATPART, XB and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the...

CVE-2024-23147

CVE-2024-23147 concerns Autodesk AutoCAD memory corruption due to parsing malicious CATPART, X_B and STEP files in ASMKERN228A.dll and ASMKERN229A.dll. The vulnerability is described as a write access violation that, in conjunction with other vulnerabilities, can lead to code execution in the con...

CVE-2024-23146 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted XB and XT file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current...