Priority LOW 35
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00214 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-121
Priority LOW 35
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00188 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-787
Priority LOW 35
A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-120
Priority LOW 35
A maliciously crafted DWG file, when parsed in acdb25.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-787
Priority LOW 35
A maliciously crafted DWG file when parsed in ACAD.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-119
Priority LOW 35
A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00203 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-908
Priority LOW 35
A maliciously crafted CATPART file when parsed in CC5Dll.dll through Autodesk AutoCAD can force an Out-of-Bounds Read vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-125
Priority LOW 35
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00218 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-416
Priority LOW 35
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-119
Priority LOW 35
A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-119
Priority LOW 35
A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-119
Priority LOW 35
A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-119
Priority LOW 35
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-787
Priority LOW 35
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00218 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-416
Priority LOW 35
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-122
Priority LOW 35
A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-787
Priority LOW 35
A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00222 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-122
Priority LOW 35
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00218 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-416
Priority LOW 35
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-125
Priority LOW 35
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00208 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-125
Priority LOW 35
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00228 · Published 2024-10-29 · Fixed in 2025.1.1, 2024.1.7 +2 CWE-122
THREATIST.IORead the docs