description: A maliciously crafted MODEL, SLDPRT or SLDASM file in VCRUNTIME140.dll when parsed through Autodesk AutoCAD can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
problem types: CWE-122: Heap-based Buffer Overflow
affected:
{
defaultStatus: unknown
product: AutoCAD, Advance Steel and Civil 3D
vendor: Autodesk
versions:
status: affected, version: 2024, 2023, 2022, 2021
}