Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-7991
PUBLISHED
More InfoOfficial Page
Assigner-autodesk
Assigner Org ID-7e40ea87-bc65-4944-9723-dd79dd760601
View Known Exploited Vulnerability (KEV) details
Published At-29 Oct, 2024 | 21:49
Updated At-26 Aug, 2025 | 18:23
Rejected At-
▼CVE Numbering Authority (CNA)
Autodesk AutoCAD DWG Out-of-Bounds Write Code Execution Vulnerability

A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected Products
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD
CPEs
  • cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD LT
CPEs
  • cpe:2.3:a:autodesk:autocad_lt:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_lt:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_lt:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_lt:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD Architecture
CPEs
  • cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD Electrical
CPEs
  • cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD MAP 3D
CPEs
  • cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD Mechanical
CPEs
  • cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD MEP
CPEs
  • cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
AutoCAD Plant 3D
CPEs
  • cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
Civil 3D
CPEs
  • cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
Advance Steel
CPEs
  • cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
  • From 2022 before 2022.1.6 (custom)
Vendor
Autodesk Inc.Autodesk
Product
DWG TrueView
CPEs
  • cpe:2.3:a:autodesk:dwg_trueview:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:dwg_trueview:2024:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:dwg_trueview:2023:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
  • From 2023 before 2023.1.7 (custom)
Vendor
Autodesk Inc.Autodesk
Product
RealDWG
CPEs
  • cpe:2.3:a:autodesk:realdwg:2025:*:*:*:*:*:*:*
  • cpe:2.3:a:autodesk:realdwg:2024:*:*:*:*:*:*:*
Default Status
unaffected
Versions
Affected
  • From 2025 before 2025.1.1 (custom)
  • From 2024 before 2024.1.7 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-787CWE-787 Out-of-Bounds Write
Metrics
VersionBase scoreBase severityVector
3.17.8HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-100CAPEC-100 Overflow Buffers
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0021
N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found