Back to feed
EUVD-2024-49650 · Published Oct 29, 2024
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Technologies
Autodesk Autocad Plant 3DAutodesk Autocad Civil 3DAutodesk Autocad MepMicrosoft WindowsAutodesk Autocad MechanicalAutodesk Autocad Advance SteelAutodesk Autocad ArchitectureAutodesk AutocadAutodesk Autocad Electrical
Weaknesses
CWE-416
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
