CVE-2023-29074: Critical severity autodesk autocad lt for macos vulnerability
A maliciously crafted CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-29074?
CVE-2023-29074 is a vulnerability in Autodesk AutoCAD 2024 and 2023 that allows a maliciously crafted CATPART file to cause an Out-Of-Bounds Write.
What is the severity of CVE-2023-29074?
The severity of CVE-2023-29074 is critical, with a CVSS score of 9.8.
Which software versions are affected by CVE-2023-29074?
Autodesk AutoCAD versions 2024 and 2023, as well as related products such as Autodesk AutoCAD Advance Steel, AutoCAD Architecture, AutoCAD Civil 3D, AutoCAD Electrical, AutoCAD LT, AutoCAD Map 3D, AutoCAD Mechanical, AutoCAD MEP, and AutoCAD Plant 3D are affected.
How can CVE-2023-29074 be exploited?
CVE-2023-29074 can be exploited by a malicious actor using a specially crafted CATPART file to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Where can I find more information about CVE-2023-29074?
More information about CVE-2023-29074 can be found in Autodesk's security advisory at https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018.