Autodesk AutoCAD Vulnerability Allows for Out-of-Bounds Write and Code Execution

CVE-2024-7991

Summary

A vulnerability in Autodesk AutoCAD and specific AutoCAD-based products enables a maliciously crafted DWG file to trigger an out-of-bounds write. When these files are processed, a malicious actor can exploit this flaw to cause application crashes, read sensitive data from the memory, or execute arbitrary code within the affected application’s process. This type of attack can compromise system integrity and expose critical information, highlighting the importance of timely patching and adhering to security advisories.

References