← Database

CVE-2024-9826

HIGH CVSS: 7.8 Published: 2024-10-29 Modified: 2026-06-17

Description

A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Affected Platforms

Microsoft WindowsAutodesk Autocad MepAutodesk AutocadAutodesk Autocad Advance SteelAutodesk Autocad Civil 3DAutodesk Autocad Plant 3DAutodesk Autocad ArchitectureAutodesk Autocad MechanicalAutodesk Autocad Electrical

Weakness Type

CWE-416, CWE-416

References