CVE-2023-27915

A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*

History

06 Feb 2025, 21:15

Type Values Removed Values Added
CWE CWE-125

21 Nov 2024, 07:53

Type Values Removed Values Added
References () https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory () https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory

20 Apr 2023, 16:00

Type Values Removed Values Added
References (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - (MISC) https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0005 - Vendor Advisory
First Time Autodesk autocad Map 3d
Autodesk autocad Architecture
Autodesk autocad Lt
Autodesk autocad Electrical
Autodesk autocad Plant 3d
Autodesk autocad Mep
Autodesk autocad
Autodesk autocad Civil 3d
Autodesk autocad Advance Steel
Autodesk autocad Mechanical
Autodesk
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CPE cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
CWE CWE-787

14 Apr 2023, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-04-14 19:15

Updated : 2025-02-06 21:15


NVD link : CVE-2023-27915

Mitre link : CVE-2023-27915

CVE.ORG link : CVE-2023-27915


JSON object : View

Products Affected

autodesk

  • autocad_advance_steel
  • autocad_civil_3d
  • autocad_map_3d
  • autocad_mep
  • autocad_architecture
  • autocad_mechanical
  • autocad_electrical
  • autocad
  • autocad_lt
  • autocad_plant_3d
CWE
CWE-787

Out-of-bounds Write

CWE-125

Out-of-bounds Read