Heap-Based Buffer Overflow Vulnerability in AutoCAD
CVE-2024-8591

7.8HIGH

Key Information:

Vendor
Autodesk
Vendor
CVE Published:
29 October 2024

Summary

The vulnerability arises from a flaw in the parsing of specially crafted 3DM files within the AcTranslators.exe component of Autodesk AutoCAD. This flaw can be exploited by an attacker to exploit a heap-based buffer overflow, potentially leading to serious consequences such as application crashes, unauthorized access to sensitive data, or the execution of arbitrary code in the context of the current process. Users of affected versions of AutoCAD should apply security patches promptly to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Advance Steel 2025 < 2025.1.1

Advance Steel 2024 < 2024.1.7

Advance Steel 2023 < 2023.1.7

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.