Memory Corruption Vulnerability in AutoCAD STP File Parsing

CVE-2024-8598

What is CVE-2024-8598?

A vulnerability exists in the Autodesk AutoCAD software that is triggered when a specially crafted STP file is parsed within the ACTranslators.exe process. This memory corruption issue can be exploited by malicious actors, resulting in application crashes, unauthorized access to sensitive information, and potentially the execution of arbitrary code under the current user’s context. Proper precautions and updates are essential to mitigate risks associated with this vulnerability.

References