Autodesk AutoCAD SLDPRT File Parsing Heap-based Buffer Overflow Code Execution Vulnerability

CVE-2024-8587

What is CVE-2024-8587?

A vulnerability exists in Autodesk AutoCAD that is exploited through parsing of a specially crafted SLDPRT file via the odxsw_dll.dll component. This vulnerability can lead to a Heap Based Buffer Overflow, potentially allowing an attacker to disrupt the application's normal operations, leading to crashes, unauthorized access to sensitive information, or execution of arbitrary code within the context of the process running AutoCAD. Users are advised to review the advisory from Autodesk to mitigate risks associated with this vulnerability.

References