CVE-2024-8592 — Autodesk AutoCAD CATPART File Parsing Memory Corruption Code Execution Vulnerability

Description (CNA)

A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / AutoCAD	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD LT	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD Architecture	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD Electrical	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD MAP 3D	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7
Autodesk / AutoCAD Mechanical	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD Mechanical	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD MEP	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / AutoCAD Plant 3D	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / Civil 3D	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6
Autodesk / Advance Steel	affected 2024 before 2024.1.6; affected 2023 before 2023.1.7; affected 2022 before 2022.1.6

CWE

CWE-120

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0020

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.