Malicious CATPART File Can Trigger Out-of-Bounds Write Vulnerability in AutoCAD
CVE-2024-8593
7.8HIGH
Key Information:
- Vendor
- Autodesk
- Vendor
- CVE Published:
- 29 October 2024
Summary
An Out-of-Bounds Write vulnerability exists in Autodesk AutoCAD due to improper handling of specially crafted CATPART files in the ASMKERN230A.dll module. This flaw can be exploited by malicious actors, enabling them to cause a crash, write sensitive data, or execute arbitrary code within the context of the affected application. Users are advised to ensure they are using the latest version of AutoCAD and to apply all relevant security updates promptly to mitigate potential exploitation.
Affected Version(s)
Advance Steel 2025 < 2025.1.1
Advance Steel 2024 < 2024.1.7
Advance Steel 2023 < 2023.1.7
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published