CVE-2024-8588

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
AutodeskAutoCAD>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD Architecture>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD Electrical>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD MAP 3D>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD Mechanical>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD MEP>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAutoCAD Plant 3D>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskCivil 3D>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6
AutodeskAdvance Steel>= 2025, < 2025.1.1; >= 2024, < 2024.1.7; >= 2023, < 2023.1.7; >= 2022, < 2022.1.6

References

Timeline

Published
Oct 29, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-85897.8A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Out-of-Bounds Read vulnerability. A malCVE-2024-85907.8A maliciously crafted 3DM file when parsed in atf_api.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A malicious acCVE-2024-85917.8A maliciously crafted 3DM file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Heap-Based Buffer Overflow vulnerabilitCVE-2024-85927.8A maliciously crafted CATPART file when parsed in AcTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. ACVE-2024-85937.8A maliciously crafted CATPART file, when parsed in ASMKERN230A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability.CVE-2024-85947.8A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Heap-Based Overflow vulnerability. A maliCVE-2024-85957.8A maliciously crafted MODEL file when parsed in libodxdll.dll through Autodesk AutoCAD can force a Use-After-Free vulnerability. A maliciousCVE-2024-85967.8A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A mCVE-2024-85977.8A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicCVE-2024-85987.8A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A maliCVE-2024-85997.8A maliciously crafted STP file when parsed in ACTranslators.exe through Autodesk AutoCAD can force a Memory Corruption vulnerability. A maliCVE-2024-86007.8A maliciously crafted SLDPRT file when parsed in odxsw_dll.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A mali
CVE-2024-8588: High severity, CVSS 7.8 | Vulnix