← Back

CVE-2024-7305

nvd nist
Published: Aug 20, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected (43)

Autodesk
11 products
Advance Steel
Autocad
Autocad Architecture
Autocad Electrical
Autocad Lt
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Civil 3d
Dwg Trueview
Configuration A
43 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Advance Steel
From 2022 to 2022.1.6
Advance Steel
From 2023 to 2023.1.7
Advance Steel
From 2024 to 2024.1.6
Advance Steel
From 2025 to 2025.1
Autodesk
Autocad
From 2022 to 2022.1.6
Autocad
From 2023 to 2023.1.7
Autocad
From 2024 to 2024.1.6
Autocad
From 2025 to 2025.1
Autodesk
Autocad Architecture
From 2022 to 2022.1.6
Autocad Architecture
From 2023 to 2023.1.7
Autocad Architecture
From 2024 to 2024.1.6
Autocad Architecture
From 2025 to 2025.1
Autodesk
Autocad Electrical
From 2022 to 2022.1.6
Autocad Electrical
From 2023 to 2023.1.7
Autocad Electrical
From 2024 to 2024.1.6
Autocad Electrical
From 2025 to 2025.1
Autodesk
Autocad Lt
From 2022 to 2022.1.6
Autocad Lt
From 2023 to 2023.1.7
Autocad Lt
From 2024 to 2024.1.6
Autocad Lt
From 2025 to 2025.1
Autodesk
Autocad Map 3d
From 2022 to 2022.1.6
Autocad Map 3d
From 2023 to 2023.1.7
Autocad Map 3d
From 2024 to 2024.1.6
Autocad Map 3d
From 2025 to 2025.1
Autodesk
Autocad Mechanical
From 2022 to 2022.1.6
Autocad Mechanical
From 2023 to 2023.1.7
Autocad Mechanical
From 2024 to 2024.1.6
Autocad Mechanical
From 2025 to 2025.1
Autodesk
Autocad Mep
From 2022 to 2022.1.6
Autocad Mep
From 2023 to 2023.1.7
Autocad Mep
From 2024 to 2024.1.6
Autocad Mep
From 2025 to 2025.1
Autodesk
Autocad Plant 3d
From 2022 to 2022.1.6
Autocad Plant 3d
From 2023 to 2023.1.7
Autocad Plant 3d
From 2024 to 2024.1.6
Autocad Plant 3d
From 2025 to 2025.1
Autodesk
Civil 3d
From 2022 to 2022.1.6
Civil 3d
From 2023 to 2023.1.7
Civil 3d
From 2024 to 2024.1.6
Civil 3d
From 2025 to 2025.1
Autodesk
Dwg Trueview
From 2023 to 2023.1.7
Dwg Trueview
From 2024 to 2024.1.6
Dwg Trueview
From 2025 to 2025.1

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

Source: psirt@autodesk.com
Vendor Advisory

Timeline

No history available yet.