Autodesk AutoCAD Vulnerability: Use-After-Free Flaw Allows Attackers to Crash, Write Data or Execute Code

CVE-2024-8590

Summary

A Use-After-Free vulnerability exists in the atf_api.dll component of Autodesk AutoCAD. This vulnerability arises when a maliciously crafted 3DM file is parsed, leading to potential crashes, the unwarranted writing of sensitive data, or unauthorized execution of arbitrary code within the context of the current process. Malicious actors can exploit this vulnerability to compromise system integrity and potentially gain unauthorized access to sensitive information.

References