A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVE-2023-29073
CVSS base score
9.8 (v3.1)
Severity
CRITICAL
Attack vector
Network
Weakness
CWE-122, CWE-787
Last modified
November 2, 2026
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
autodesk autocad
autodesk autocad advance steel
autodesk autocad architecture
autodesk autocad civil 3d
autodesk autocad electrical
autodesk autocad lt
autodesk autocad map 3d
autodesk autocad mechanical
autodesk autocad mep
autodesk autocad plant 3d
References
- www.autodesk.com Vendor Advisory
- www.autodesk.com Vendor Advisory