← Database

CVE-2024-8595

HIGH CVSS: 7.8 Published: 2024-10-29 Modified: 2026-06-17

Description

A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Affected Platforms

Microsoft WindowsAutodesk Autocad MepAutodesk AutocadAutodesk Autocad Advance SteelAutodesk Autocad Civil 3DAutodesk Autocad Plant 3DAutodesk Autocad ArchitectureAutodesk Autocad MechanicalAutodesk Autocad Electrical

Weakness Type

CWE-416, CWE-416

References