7.8
High
CVE-2024-7305 A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write…
Description
A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| autocad_mep | 2025 | No fix stated |
| autocad_plant_3d | 2025 | No fix stated |
| AutoCAD 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| autocad_architecture | 2025 | No fix stated |
| autocad_electrical | 2025 | No fix stated |
| autocad_mechanical | 2025 | No fix stated |
Show the 42 other branches Hide the 42 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| autocad_civil_3d | 2025 | No fix stated |
| autocad_lt | 2025 | No fix stated |
| dwg_trueview | 2025 | No fix stated |
| AutoCAD Architecture 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Architecture 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| AutoCAD Electrical 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD Electrical 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Electrical 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Mechanical 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| AutoCAD MEP 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD MEP 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD Plant 3D 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| Civil 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| Civil 3D 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| Civil 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| Civil 3D 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| Advance Steel 2025 | 2025 → < 2025.1 | 2025.1 |
| Advance Steel 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| Advance Steel 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| Advance Steel 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| AutoCAD LT 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD LT 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD LT 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD LT 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
| DWG TrueView 2025 | 2025 → < 2025.1 | 2025.1 |
| DWG TrueView 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| DWG TrueView 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.6 | 2024.1.6 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.7 | 2023.1.7 |
| AutoCAD MAP 3D 2022 | 2022 → < 2022.1.6 | 2022.1.6 |
Other CVEs of autocad_mep
The 14 CVEs of autocad_mep →
CVE-2024-23159
A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to…
7.8
High
CVE-2024-23157
A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a…
7.8
High
CVE-2024-23153
A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds…
7.8
High
CVE-2024-23150
A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds…
7.8
High