| Package | Affected versions | Patched versions |
|---|---|---|
| autocad | ≥ 2023.0.0, < 2023.1.4≥ 2024.0.0, < 2024.1.1< 2024.1 | 2023.1.42024.1.12024.1 |
| autocad advance steel | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad architecture | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad civil 3d | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad electrical | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad lt | ≥ 2024.0.0, < 2024.1.1< 2023.1.4< 2024.1 | 2024.1.12023.1.42024.1 |
| autocad map 3d | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad mechanical | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad mep | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
| autocad plant 3d | ≥ 2024.0.0, < 2024.1.1< 2023.1.4 | 2024.1.12023.1.4 |
A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free