CVE-2024-8594

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8594
A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

11 Apr 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'source': 'psirt@autodesk.com'}
  • () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

03 Feb 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'tags': ['Vendor Advisory'], 'source': 'psirt@autodesk.com'}
  • () https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

01 Nov 2024, 16:18

Type Values Removed Values Added
References () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - Vendor Advisory
First Time Autodesk autocad Advance Steel
Autodesk autocad Civil 3d
Autodesk autocad
Microsoft
Autodesk autocad Mep
Microsoft windows
Autodesk autocad Plant 3d
Autodesk autocad Architecture
Autodesk
Autodesk autocad Electrical
Autodesk autocad Mechanical
CPE cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
CWE CWE-787

01 Nov 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) Un archivo MODEL creado con fines malintencionados, cuando se analiza en libodxdll.dll a través de Autodesk AutoCAD, puede provocar una vulnerabilidad de desbordamiento de búfer de almacenamiento dinámico. Un actor malintencionado puede aprovechar esta vulnerabilidad para provocar un bloqueo, escribir datos confidenciales o ejecutar código arbitrario en el contexto del proceso actual.

29 Oct 2024, 22:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-29 22:15

Updated : 2025-04-11 17:15

NVD link : CVE-2024-8594

Mitre link : CVE-2024-8594

CVE.ORG link : CVE-2024-8594

JSON object : View

Products Affected

autodesk

  • autocad
  • autocad_plant_3d
  • autocad_mechanical
  • autocad_mep
  • autocad_civil_3d
  • autocad_advance_steel
  • autocad_architecture
  • autocad_electrical

microsoft

  • windows
CWE
CWE-122

Heap-based Buffer Overflow

CWE-787

Out-of-bounds Write