CVE-2024-7992

Published: Oct 29, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, can force a Stack-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected (10)

Products: Autodesk: Autocad, Autocad Advance Steel, Autocad Architecture, Autocad Civil 3d, Autocad Electrical, Autocad Lt, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Dwg Trueview

Autodesk

10 products

Autocad

Autocad Advance Steel

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad	From 2025 to 2025.1.1
Autodesk Autocad Advance Steel	From 2025 to 2025.1.1
Autodesk Autocad Architecture	From 2025 to 2025.1.1
Autodesk Autocad Civil 3d	From 2025 to 2025.1.1
Autodesk Autocad Electrical	From 2025 to 2025.1.1
Autodesk Autocad Lt	From 2025 to 2025.1.1
Autodesk Autocad Mechanical	From 2025 to 2025.1.1
Autodesk Autocad Mep	From 2025 to 2025.1.1
Autodesk Autocad Plant 3d	From 2025 to 2025.1.1
Autodesk Dwg Trueview	From 2025 to 2025.1.1

Related CWEs

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (1)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0021

Source: psirt@autodesk.com

Timeline

No history available yet.