CVE-2023-29075CWE-787

A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write

Critical · published November 23, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

🚨 A rogue PRT file can unleash chaos in AutoCAD 2023 and 2024, leading to catastrophic crashes and even arbitrary code execution! 🔥 Think of it like a construction blueprint with a hidden flaw that causes the whole building to collapse mid-construction. Just one faulty line can bring everything crashing down! An attacker could leverage this vulnerability to crash your AutoCAD application, potentially exposing sensitive data or even executing malicious code within the same process. This could have devastating consequences, especially if critical designs or plans are involved!

Put simply

Think of it like a construction blueprint with a hidden flaw that causes the whole building to collapse mid-construction. Just one faulty line can bring everything crashing down! CVE-2023-29075 is an Out-Of-Bounds Write vulnerability that arises from the improper handling of maliciously crafted PRT files in AutoCAD. When parsed, these files can cause severe stability issues and allow arbitrary code execution.

What to do

An attacker could leverage this vulnerability to crash your AutoCAD application, potentially exposing sensitive data or even executing malicious code within the same process. This could have devastating consequences, especially if critical designs or plans are involved! Immediate action is crucial! Update AutoCAD to the latest version, ensuring you’re on the patched version that addresses this vulnerability. Be sure to audit any files received from untrusted sources to avoid exposure. 🛡️ You’ve got this! Follow these steps and keep your designs safe and secure! 🎉

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01116 · 65.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-11-23T03:39Z
EPSS history
Timeline
  • 23 NOV 03:39Z
    A maliciously crafted PRT file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause an Out-Of-Bounds Write
    cvelistv5