Autodesk AutoCAD Vulnerable to Malicious MODEL File Parsing

CVE-2024-8596

What is CVE-2024-8596?

An out-of-bound write vulnerability exists in Autodesk AutoCAD resulting from improper parsing of maliciously crafted MODEL files through the libodxdll.dll component. Attackers exploiting this flaw can potentially crash the software, write sensitive information, or execute arbitrary code within the context of the running process. This poses significant risks to users and organizations relying on Autodesk's design tools, prompting the need for immediate attention and rectification as outlined in the Autodesk security advisory.

References