← Database

CVE-2024-8896

HIGH CVSS: 7.8 Published: 2024-10-29 Modified: 2026-06-17

Description

A maliciously crafted DXF file when parsed in acdb25.dll through Autodesk AutoCAD can force to access a variable prior to initialization. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Affected Platforms

Autodesk Autocad MepAutodesk AutocadAutodesk Autocad Advance SteelAutodesk Dwg TrueviewAutodesk Autocad Civil 3DAutodesk Autocad Plant 3DAutodesk Autocad ArchitectureAutodesk Autocad MechanicalAutodesk Autocad ElectricalAutodesk Autocad Lt

Weakness Type

CWE-908, CWE-908

References