A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0014 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
30 Jul 2025, 17:26
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:autodesk:autocad:*:*:*:*:*:-:*:* cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:dwg_trueview:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_lt:*:*:*:*:*:-:*:* cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:* |
|
| References | () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0014 - Vendor Advisory | |
| First Time |
Autodesk autocad Electrical
Autodesk advance Steel Autodesk dwg Trueview Autodesk autocad Architecture Autodesk autocad Lt Autodesk autocad Map 3d Autodesk autocad Autodesk autocad Mep Autodesk civil 3d Autodesk Autodesk autocad Mechanical Autodesk autocad Plant 3d |
10 Feb 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. |
20 Aug 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-20 00:15
Updated : 2025-07-30 17:26
NVD link : CVE-2024-7305
Mitre link : CVE-2024-7305
JSON object : View
Products Affected
autodesk
- autocad_mechanical
- autocad
- autocad_electrical
- advance_steel
- autocad_plant_3d
- autocad_mep
- autocad_map_3d
- civil_3d
- dwg_trueview
- autocad_architecture
- autocad_lt
CWE
No CWE.