Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29076

A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Published

2023-11-23T04:15:07.410

Last Modified

2024-11-21T07:56:30.397

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application autodesk autocad < 2024.1 Yes
Application autodesk autocad < 2023.1.4 Yes
Application autodesk autocad < 2024.1.1 Yes
Application autodesk autocad_advance_steel < 2023.1.4 Yes
Application autodesk autocad_advance_steel < 2024.1.1 Yes
Application autodesk autocad_architecture < 2023.1.4 Yes
Application autodesk autocad_architecture < 2024.1.1 Yes
Application autodesk autocad_civil_3d < 2023.1.4 Yes
Application autodesk autocad_civil_3d < 2024.1.1 Yes
Application autodesk autocad_electrical < 2023.1.4 Yes
Application autodesk autocad_electrical < 2024.1.1 Yes
Application autodesk autocad_lt < 2023.1.4 Yes
Application autodesk autocad_lt < 2024.1 Yes
Application autodesk autocad_lt < 2024.1.1 Yes
Application autodesk autocad_map_3d < 2023.1.4 Yes
Application autodesk autocad_map_3d < 2024.1.1 Yes
Application autodesk autocad_mechanical < 2023.1.4 Yes
Application autodesk autocad_mechanical < 2024.1.1 Yes
Application autodesk autocad_mep < 2023.1.4 Yes
Application autodesk autocad_mep < 2024.1.1 Yes
Application autodesk autocad_plant_3d < 2023.1.4 Yes
Application autodesk autocad_plant_3d < 2024.1.1 Yes
References