NetSight
critical9.8

CVE-2023-29076

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability.

Impact

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected products

VendorProductAffected versions
AutodeskAutocad
before 2024.1
from 2023.0.0 before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Advance Steel
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Architecture
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Civil 3d
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Electrical
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Lt
before 2023.1.4
before 2024.1
from 2024.0.0 before 2024.1.1
AutodeskAutocad Map 3d
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Mechanical
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Mep
before 2023.1.4
from 2024.0.0 before 2024.1.1
AutodeskAutocad Plant 3d
before 2023.1.4
from 2024.0.0 before 2024.1.1

Weakness classification

References