CVE-2023-29076: Buffer Overflow
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-29076.
What is the severity of CVE-2023-29076?
The severity of CVE-2023-29076 is critical with a CVSS score of 9.8.
Which software is affected by CVE-2023-29076?
Autodesk AutoCAD 2024 and 2023, Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D are affected by CVE-2023-29076.
What is the description of CVE-2023-29076?
CVE-2023-29076 is a memory corruption vulnerability in Autodesk AutoCAD 2024 and 2023 that can be exploited by parsing a maliciously crafted MODEL, SLDASM, SAT, or CATPART file, potentially leading to code execution in the current process.
How can I fix CVE-2023-29076?
To fix CVE-2023-29076, update to the latest version of Autodesk AutoCAD 2024 or 2023, as well as the affected software versions of Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D.