Malicious STP File Can Cause Memory Corruption, Execute Arbitrary Code in AutoCAD

CVE-2024-8599

Summary

A vulnerability exists within Autodesk AutoCAD that arises when a maliciously crafted STP file is parsed in the ACTranslators.exe component. This issue can lead to memory corruption, allowing a malicious actor to exploit the vulnerability. The attacker may cause the application to crash, potentially leading to the disclosure of sensitive information or executing arbitrary code within the context of the current application process.

References