CVE-2023-29074

Severity CVSS v4.0:
Pending analysis
Type:
CWE-787 Out-of-bounds Write
Publication date:
23/11/2023
Last modified:
30/11/2023

Description

A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.<br />

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:macos:*:* 2024.1 (excluding)
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* 2023.0.0 (including) 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:* 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:* 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* 2023.1.4 (excluding)
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:macos:*:* 2024.1 (excluding)
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:* 2024.0.0 (including) 2024.1.1 (excluding)
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* 2023.1.4 (excluding)


References to Advisories, Solutions, and Tools