Heap-Based Buffer Overflow Vulnerability in AutoCAD

CVE-2024-8591

What is CVE-2024-8591?

The vulnerability arises from a flaw in the parsing of specially crafted 3DM files within the AcTranslators.exe component of Autodesk AutoCAD. This flaw can be exploited by an attacker to exploit a heap-based buffer overflow, potentially leading to serious consequences such as application crashes, unauthorized access to sensitive data, or the execution of arbitrary code in the context of the current process. Users of affected versions of AutoCAD should apply security patches promptly to mitigate potential risks associated with this vulnerability.

References