CVE-2024-0446

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD (affected versions not specified)

Description A maliciously crafted STP, CATPART, or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. This vulnerability can be leveraged by a malicious actor to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. The issue exists due to a boundary error when processing untrusted input data, which can allow an attacker to gain unauthorized access to protected information, execute arbitrary code, or cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.