CVE-2024-8590highCWE-416

CVE-2024-8590: falha de alta gravidade em Autodesk AutoCAD

Autodesk AutoCAD 3DM File Parsing Use-After-Free Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar AutoCAD+ Monitorar Civil

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.8epss 0.2%
A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Autodesk · Advance SteelAutodesk · AutoCADAutodesk · AutoCAD ArchitectureAutodesk · AutoCAD ElectricalAutodesk · AutoCAD MAP 3DAutodesk · AutoCAD MechanicalAutodesk · AutoCAD MEPAutodesk · AutoCAD Plant 3DAutodesk · Civil 3D
CVEs relacionadas — Autodesk AutoCAD

No mesmo produto, das mais perigosas para as menos.

CVE-2024-23137HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 1.0%CVE-2024-23122HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.7%CVE-2024-23123HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23121HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23132HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%CVE-2024-23124HIGHMultiple Vulnerabilities in the Autodesk AutoCAD Desktop SoftwareEPSS 0.6%