Malicious DXF File Vulnerability Can Cause Crashes, Data Write, Code Execution
CVE-2024-8896

7.8HIGH

Key Information:

Vendor

Autodesk

Vendor
CVE Published:
29 October 2024

What is CVE-2024-8896?

A vulnerability exists in the parsing of DXF files via the acdb25.dll component in Autodesk AutoCAD. When a specially crafted DXF file is processed, the software may attempt to access an uninitialized variable. This flaw could be exploited by malicious entities to cause application crashes, compromise sensitive information, or even execute arbitrary code within the affected application context. It is crucial for users of AutoCAD to apply the latest security updates and follow best practices to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Advance Steel 2025 < 2025.1.1

Advance Steel 2024 < 2024.1.7

Advance Steel 2023 < 2023.1.7

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.