| Package | Affected versions | Patched versions |
|---|---|---|
| autocad | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad advance steel | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad architecture | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad civil 3d | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad electrical | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad mechanical | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad mep | ≥ 2025, < 2025.1.1 | 2025.1.1 |
| autocad plant 3d | ≥ 2025, < 2025.1.1 | 2025.1.1 |
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free