Integer overflow

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process...

Memory corruption

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Memory corruption

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Stack overflow

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the...

Out-of-bounds

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...

CVE-2023-29067

CVE-2023-29067 concerns Autodesk AutoCAD 2023 with a memory corruption vulnerability triggered by parsing a malicious X_B file, via a write access violation that could lead to code execution in the current process. Affected product: AutoCAD 2023; vulnerable component/file: X_B parsing path; root ...

CVE-2023-27913

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process...

Autodesk AutoCAD 2023 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD version 2023, which originates from a maliciously crafted XB file that enforces an out-of-bounds read when parsing. An attacker can exploit...

PT-2023-21414 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: A maliciously crafted X B file can be used to write beyond the allocated buffer, causing a Stack Buffer Overflow when parsed through Autodesk AutoCAD. This can be leveraged by a malicious actor to...

CVE-2023-27914

Autodesk AutoCAD 2023 is affected by CVE-2023-27914 due to parsing a malicious X_B file, which can cause a stack buffer overflow. The underlying issue is a write beyond the allocated buffer, leading to crashes, potential data leakage, or arbitrary code execution within the process context. The pu...

CVE-2023-27914

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can be used to write beyond the allocated buffer causing a Stack Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD version 2023, which originates from a maliciously crafted XB file that can be used to write to an unallocated buffer, resulting in a stack...

CVE-2023-27915

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

PT-2023-21415 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD version 2023 Description: A maliciously crafted X B file when parsed through Autodesk AutoCAD could lead to memory corruption by read access violation. This issue, in conjunction with other issues, could lead to code executio...

CVE-2023-27915

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-29067

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2023-27912

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code in the context of the current process...

CVE-2023-27912

CVE-2023-27912 affects Autodesk AutoCAD 2023, where parsing a malicious X_B file can trigger an Out-of-Bounds Read, potentially causing a crash, exposing data, or allowing arbitrary code execution in the current process. Affected component: X_B parsing in AutoCAD 2023. Root cause: out-of-bounds r...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD 2023 that originates from a memory corruption due to a write access conflict when parsing a maliciously crafted XB file. An attacker can...

Autodesk AutoCAD 输入验证错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A security vulnerability exists in Autodesk AutoCAD version 2023, which originates from a maliciously crafted XB file that causes an integer overflow when parsed. An attacker can exploit this...