Skip to content
OpenAdvisories
Unscored CVE-2023-27908 EUVD-2023-31634GHSA-qxcq-vfxx-5hxp

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and …

Published Jun 23, 2023 · Updated Dec 5, 2024 · Assigned by autodesk

Description

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability.

Affected products

VendorProductAffectedFixed
— Autodesk installer 1.29.0.90 or later, included with 2023 and 2024 product installs —

References