vulnerability

AutoDesk AutoCAD: CVE-2024-9997: Autodesk AutoCAD, Advance Steel and Civil 3D

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 29, 2024
Added
Jul 22, 2025
Modified
Jul 22, 2025

Description

A maliciously crafted DWG file when parsed in acdb25.dll through Autodesk affected applications can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Solution

autodesk-autocad-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.