Description
A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Reserved 2024-09-16 | Published 2024-10-29 | Updated 2025-05-14 | Assigner
autodeskHIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Problem types
CWE-908 Use of Uninitialized Resource
Product status
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
2022 before 2022.1.6
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
2023 before 2023.1.7
affected
Default status
unaffected
2025 before 2025.1.1
affected
2024 before 2024.1.7
affected
References
www.autodesk.com/trust/security-advisories/adsk-sa-2024-0021
cve.org (CVE-2024-8896)
nvd.nist.gov (CVE-2024-8896)
Download JSON
