Show filters
272 Total Results
Displaying 41-50 of 272
Sort by:
Attacker Value
Unknown

CVE-2024-7991

Disclosure Date: October 29, 2024 (last updated February 10, 2025)
A maliciously crafted DWG file, when parsed through Autodesk AutoCAD and certain AutoCAD-based products, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-8587

Disclosure Date: October 29, 2024 (last updated November 08, 2024)
A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Heap Based Buffer Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7994

Disclosure Date: October 16, 2024 (last updated January 28, 2025)
A maliciously crafted RFA file, when parsed through Autodesk Revit, can force a Stack-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7993

Disclosure Date: October 16, 2024 (last updated February 10, 2025)
A maliciously crafted PDF file, when parsed through Autodesk Revit, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7675

Disclosure Date: September 30, 2024 (last updated November 07, 2024)
A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7674

Disclosure Date: September 30, 2024 (last updated January 29, 2025)
A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7673

Disclosure Date: September 30, 2024 (last updated January 29, 2025)
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7672

Disclosure Date: September 30, 2024 (last updated February 10, 2025)
A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7671

Disclosure Date: September 30, 2024 (last updated February 10, 2025)
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Attacker Value
Unknown

CVE-2024-7670

Disclosure Date: September 30, 2024 (last updated January 29, 2025)
A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.