EUVD-2024-49618

Malicious code in bioql PyPI...

CVE-2024-8598

A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8591

A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-8598

CVE-2024-8598 describes a memory corruption vulnerability in Autodesk AutoCAD triggered by parsing a malicious STP/STEP file in the ACTranslators.exe component. A crafted STP file can cause a crash, allow reading/writing of sensitive data, or enable arbitrary code execution in the process context...