Weakness
A maliciously crafted DWG or DXF file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash or disclose sensitive information.
Affected products
- autodesk advance_steel
- autodesk autocad
- autodesk autocad_architecture
- autodesk autocad_electrical
- autodesk autocad_lt
- autodesk autocad_map_3d
- autodesk autocad_mechanical
- autodesk autocad_mep
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.