Autodesk AutoCAD DXF File Parsing Unitialized Variable Remote Code Execution Vulnerability

Rocco Calvi

ZDI ID: ZDI-24-1426
ZDI-CAN: ZDI-CAN-25259
CVSS
7.8 AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Vendors
Autodesk
Affected Products
AutoCAD

Additional Details

Disclosure Timeline

  • 2024-09-03 — Vulnerability reported to vendor
  • 2024-10-31 — Coordinated public release of advisory