Malicious CATPART File Can Trigger Out-of-Bounds Write Vulnerability in AutoCAD
CVE-2024-8593

7.8HIGH

Key Information:

Vendor
Autodesk
Vendor
CVE Published:
29 October 2024

Summary

An Out-of-Bounds Write vulnerability exists in Autodesk AutoCAD due to improper handling of specially crafted CATPART files in the ASMKERN230A.dll module. This flaw can be exploited by malicious actors, enabling them to cause a crash, write sensitive data, or execute arbitrary code within the context of the affected application. Users are advised to ensure they are using the latest version of AutoCAD and to apply all relevant security updates promptly to mitigate potential exploitation.

Affected Version(s)

Advance Steel 2025 < 2025.1.1

Advance Steel 2024 < 2024.1.7

Advance Steel 2023 < 2023.1.7

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.