Autodesk AutoCAD Vulnerability Allows for Out-of-Bounds Write and Code Execution

CVE-2024-7305

What is CVE-2024-7305?

A vulnerability exists in Autodesk AutoCAD that involves the parsing of maliciously crafted DWF files via the AdDwfPdk.dll library. This can lead to an Out-of-Bounds Write condition, enabling an attacker to manipulate program behavior. Successful exploitation could result in crashes, the disclosure of sensitive information, or the execution of arbitrary code within the current process context. Users and organizations utilizing Autodesk AutoCAD are urged to apply security updates to mitigate potential risks.

References