CVE-2024-23138

Stack-based Overflow Vulnerability in the TrueViewTM Desktop Software

State: Published
Severity: 7.8 High
Published: Mar 17, 2024
Updated: Aug 26, 2025
Reserved: Jan 11, 2024

Description

A maliciously crafted DWG file when parsed through Autodesk DWG TrueView can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	autodesk

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
AutoCADAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD ArchitectureAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD ElectricalAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD MechanicalAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD MEPAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD Plant 3DAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
Civil 3DAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
Advance SteelAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD MAP 3DAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD LTAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected 2021 to before 2021.1.4Affected
AutoCAD MacAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.4.1Affected
AutoCAD LT for MacAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.4.1Affected
DWG TrueViewAutodesk	2024 to before 2024.1.3Affected 2023 to before 2023.1.5Affected 2022 to before 2022.1.4Affected

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0006

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.