Paper/Archive/CVE-2023-29074

CVE-2023-29074

Autodesk AutoCAD, Advance Steel and Civil 3D — A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write.

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 66.1.661 × 2013.2 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected

ProductAffectedFixed inSource

AutoCAD, Advance Steel and Civil 3D2024, 2023–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refautodesk.com/trust/security-advisories/adsk-sa-2023-0018