← Back

CVE-2023-27913

nvd nist
Published: Apr 14, 2023Modified: Feb 6, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can be used to cause an Integer Overflow. A malicious actor can leverage this vulnerability to cause a crash or read sensitive data, or execute arbitrary code in the context of the current process.

Affected (10)

Autodesk
10 products
Autocad
Autocad Advance Steel
Autocad Architecture
Autocad Civil 3d
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Autocad
From 2023 to 2023.1.3
Autocad Advance Steel
From 2023 to 2023.1.3
Autocad Architecture
From 2023 to 2023.1.3
Autocad Civil 3d
From 2023 to 2023.1.3
Autocad Electrical
From 2023 to 2023.1.3
Autocad Lt
From 2023 to 2023.1.3
Autocad Map 3d
From 2023 to 2023.1.3
Autocad Mechanical
From 2023 to 2023.1.3
Autocad Mep
From 2023 to 2023.1.3
Autocad Plant 3d
From 2023 to 2023.1.3

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.