CVE-2024-8588
📋 TL;DR
This vulnerability allows attackers to exploit an out-of-bounds read in AutoCAD's SLDPRT file parser. When a malicious SLDPRT file is opened, attackers can crash the application, leak sensitive data, or execute arbitrary code. All AutoCAD users who open untrusted SLDPRT files are affected.
💻 Affected Systems
- Autodesk AutoCAD
📦 What is this software?
Autocad by Autodesk
Autocad Mep by Autodesk
⚠️ Risk & Real-World Impact
Worst Case
Remote code execution with the same privileges as the AutoCAD process, potentially leading to full system compromise.
Likely Case
Application crash or denial of service when opening malicious files, with potential data leakage.
If Mitigated
No impact if files are from trusted sources only and proper security controls are implemented.
🎯 Exploit Status
Exploitation requires user interaction to open malicious SLDPRT file. No public exploit code available at this time.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Check Autodesk Security Advisory ADSK-SA-2024-0019 for specific patched versions
Vendor Advisory: https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0019
Restart Required: Yes
Instructions:
1. Open AutoCAD. 2. Navigate to Help > About. 3. Check current version. 4. Visit Autodesk Trust Center. 5. Download and install latest security update. 6. Restart AutoCAD.
🔧 Temporary Workarounds
Block SLDPRT file extensions
windowsPrevent AutoCAD from opening SLDPRT files via group policy or application restrictions
Not applicable - configure via Group Policy or application settings
Use trusted file sources only
allImplement policy to only open SLDPRT files from verified, trusted sources
🧯 If You Can't Patch
- Implement application whitelisting to prevent execution of malicious code
- Use network segmentation to isolate AutoCAD workstations from critical systems
🔍 How to Verify
Check if Vulnerable:
Check AutoCAD version against affected versions listed in Autodesk Security Advisory ADSK-SA-2024-0019Check Version:
In AutoCAD: Help > About or command line: acad.exe /versionVerify Fix Applied:
Verify AutoCAD version is updated to patched version specified in Autodesk advisory📡 Detection & Monitoring
Log Indicators:
- Application crashes in AutoCAD when opening SLDPRT files
- Unexpected memory access errors in application logs
Network Indicators:
- Downloads of SLDPRT files from untrusted sources
- Unusual outbound connections from AutoCAD process
SIEM Query:
EventID=1000 Source="AutoCAD" AND "Exception code: 0xc0000005" OR search for "odxsw_dll.dll" crash events