Paper/Archive/CVE-2023-29076

CVE-2023-29076

Autodesk AutoCAD, Advance Steel and Civil 3D — A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 65.3.653 × 2013.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected

ProductAffectedFixed inSource

AutoCAD, Advance Steel and Civil 3D2024, 2023–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refautodesk.com/trust/security-advisories/adsk-sa-2023-0018