CVE-2023-29076: Buffer Overflow
First published: Thu Nov 23 2023(Updated: )
A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Credit: psirt@autodesk.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Autodesk Autocad | <2024.1 | |
| Autodesk Autocad | >=2023.0.0<2023.1.4 | |
| Autodesk Autocad | >=2024.0.0<2024.1.1 | |
| Autodesk Autocad Advance Steel | <2023.1.4 | |
| Autodesk Autocad Advance Steel | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD Architecture | <2023.1.4 | |
| Autodesk AutoCAD Architecture | >=2024.0.0<2024.1.1 | |
| Autodesk Autocad Civil 3d | <2023.1.4 | |
| Autodesk Autocad Civil 3d | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD Electrical | <2023.1.4 | |
| Autodesk AutoCAD Electrical | >=2024.0.0<2024.1.1 | |
| Autodesk Autocad Lt | <2023.1.4 | |
| Autodesk Autocad Lt | <2024.1 | |
| Autodesk Autocad Lt | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD Map 3D | <2023.1.4 | |
| Autodesk AutoCAD Map 3D | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD Mechanical | <2023.1.4 | |
| Autodesk AutoCAD Mechanical | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD MEP | <2023.1.4 | |
| Autodesk AutoCAD MEP | >=2024.0.0<2024.1.1 | |
| Autodesk AutoCAD Plant 3D | <2023.1.4 | |
| Autodesk AutoCAD Plant 3D | >=2024.0.0<2024.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-29076.
What is the severity of CVE-2023-29076?
The severity of CVE-2023-29076 is critical with a CVSS score of 9.8.
Which software is affected by CVE-2023-29076?
Autodesk AutoCAD 2024 and 2023, Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D are affected by CVE-2023-29076.
What is the description of CVE-2023-29076?
CVE-2023-29076 is a memory corruption vulnerability in Autodesk AutoCAD 2024 and 2023 that can be exploited by parsing a maliciously crafted MODEL, SLDASM, SAT, or CATPART file, potentially leading to code execution in the current process.
How can I fix CVE-2023-29076?
To fix CVE-2023-29076, update to the latest version of Autodesk AutoCAD 2024 or 2023, as well as the affected software versions of Autodesk AutoCAD Advance Steel, Autodesk AutoCAD Architecture, Autodesk AutoCAD Civil 3D, Autodesk AutoCAD Electrical, Autodesk AutoCAD LT, Autodesk AutoCAD Map 3D, Autodesk AutoCAD Mechanical, Autodesk AutoCAD MEP, and Autodesk AutoCAD Plant 3D.
- collector/nvd-api
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/autodesk
- canonical/autodesk autocad
- version/autodesk autocad/2023.0.0
- version/autodesk autocad/2024.0.0
- canonical/autodesk autocad advance steel
- version/autodesk autocad advance steel/2024.0.0
- canonical/autodesk autocad architecture
- version/autodesk autocad architecture/2024.0.0
- canonical/autodesk autocad civil 3d
- version/autodesk autocad civil 3d/2024.0.0
- canonical/autodesk autocad electrical
- version/autodesk autocad electrical/2024.0.0
- canonical/autodesk autocad lt
- version/autodesk autocad lt/2024.0.0
- canonical/autodesk autocad map 3d
- version/autodesk autocad map 3d/2024.0.0
- canonical/autodesk autocad mechanical
- version/autodesk autocad mechanical/2024.0.0
- canonical/autodesk autocad mep
- version/autodesk autocad mep/2024.0.0
- canonical/autodesk autocad plant 3d
- version/autodesk autocad plant 3d/2024.0.0