CVE-2023-27915: High severity autodesk autocad 2024 vulnerability

Q: What is CVE-2023-27915?

CVE-2023-27915 is a vulnerability that could lead to memory corruption in Autodesk AutoCAD 2023.

Q: How severe is CVE-2023-27915?

CVE-2023-27915 has a severity score of 7.8 out of 10, which is considered high.

Q: Which software versions are affected by CVE-2023-27915?

Autodesk AutoCAD versions 2023.1.3 and prior are affected by CVE-2023-27915.

Q: How can CVE-2023-27915 be exploited?

CVE-2023-27915 can be exploited by parsing a maliciously crafted X_B file through Autodesk AutoCAD 2023, which may lead to memory corruption and code execution.

Q: How can I fix CVE-2023-27915?

To fix CVE-2023-27915, it is recommended to update Autodesk AutoCAD to version 2023.1.4 or later.

Published Apr 14, 2023

Updated

A maliciously crafted XB file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

Affected Software

10 affected components

Autodesk AutoCAD>=2023<2023.1.3

Autodesk Autocad Advance Steel>=2023<2023.1.3

Autodesk AutoCAD Architecture>=2023<2023.1.3

Autodesk Autocad Civil 3d>=2023<2023.1.3

Autodesk AutoCAD Electrical>=2023<2023.1.3

Autodesk AutoCAD LT>=2023<2023.1.3

Autodesk AutoCAD Map 3D>=2023<2023.1.3

Autodesk AutoCAD Mechanical>=2023<2023.1.3

Autodesk AutoCAD MEP>=2023<2023.1.3

Autodesk AutoCAD Plant 3D>=2023<2023.1.3

Event History

Apr 14, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2023-27915?

CVE-2023-27915 is a vulnerability that could lead to memory corruption in Autodesk AutoCAD 2023.

How severe is CVE-2023-27915?

CVE-2023-27915 has a severity score of 7.8 out of 10, which is considered high.

Which software versions are affected by CVE-2023-27915?

Autodesk AutoCAD versions 2023.1.3 and prior are affected by CVE-2023-27915.

How can CVE-2023-27915 be exploited?

CVE-2023-27915 can be exploited by parsing a maliciously crafted X_B file through Autodesk AutoCAD 2023, which may lead to memory corruption and code execution.

How can I fix CVE-2023-27915?