Malicious DWG File Can Cause Memory Corruption, Write Sensitive Data, or Execute Arbitrary Code in AutoCAD

CVE-2024-9489

What is CVE-2024-9489?

A vulnerability exists in Autodesk AutoCAD that allows a maliciously crafted DWG file to trigger memory corruption within the ACAD.exe process. When this file is parsed, it may cause the application to crash, possibly leading to the exposure of sensitive data. Additionally, this flaw presents an opportunity for attackers to execute arbitrary code within the context of the currently running process, which could have serious implications for users' security and data integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References