CVE-2024-9826

A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

11 Apr 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'name': 'https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'tags': [], 'refsource': ''}
  • () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

03 Feb 2025, 17:15

Type Values Removed Values Added
References
  • {'url': 'https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'name': 'https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019', 'tags': ['Vendor Advisory'], 'refsource': ''}
  • () https://autodesk.com/trust/security-advisories/adsk-sa-2024-0019 -

01 Nov 2024, 16:17

Type Values Removed Values Added
First Time Autodesk autocad Electrical
Microsoft windows
Autodesk autocad Mep
Autodesk
Autodesk autocad Advance Steel
Autodesk autocad Plant 3d
Autodesk autocad
Microsoft
Autodesk autocad Civil 3d
Autodesk autocad Mechanical
Autodesk autocad Architecture
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-416
References () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - () https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019 - Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_civil_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*

29 Oct 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-10-29 22:15

Updated : 2025-04-11 17:15


NVD link : CVE-2024-9826

Mitre link : CVE-2024-9826


JSON object : View

Products Affected

autodesk

  • autocad_mechanical
  • autocad
  • autocad_electrical
  • autocad_plant_3d
  • autocad_mep
  • autocad_advance_steel
  • autocad_civil_3d
  • autocad_architecture

microsoft

  • windows
CWE
CWE-416

Use After Free