Autodesk AutoCAD Vulnerability allows Malicious Code Execution

CVE-2024-9996

Summary

An Out-of-Bounds Write vulnerability exists in Autodesk AutoCAD due to inadequate validation of input when processing maliciously crafted DWG files via the acdb25.dll component. Threat actors can exploit this flaw by crafting specifically designed DWG files that, once opened, can lead to a crash of the application. In addition, the exploitation may allow the attacker to write sensitive data to memory locations, potentially altering program execution flow and executing arbitrary code within the context of the current process. Users are urged to apply security patches promptly to mitigate the risk associated with this flaw.

References