November 3, 2026

CVE Watchtower

← Back to CVE List

CVE-2023-29073NVD

Vulnerability Summary

A maliciously crafted MODEL file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to cause a Heap-Based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Severity Level
CRITICAL(9.8)
Published Date
Nov 23, 2023
Last Modified
Nov 2, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
1.13%Probability
Root Weakness (CWE)
CWE-122: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CWE-787: Unknown/Unlisted Weakness ↗
Refer to the official MITRE database for detailed architectural specifications regarding this weakness.
CVSS v3.1 Base Metrics — Score 9.8 (CRITICAL)
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

Affected & Patched Versions

Affected Versions
  • Autodesk Autocad < 2024.1
  • Autodesk Autocad >= 2023.0.0 and < 2023.1.4
  • Autodesk Autocad >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Advance Steel < 2023.1.4
  • Autodesk Autocad Advance Steel >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Architecture < 2023.1.4
  • Autodesk Autocad Architecture >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Civil 3d < 2023.1.4
  • Autodesk Autocad Civil 3d >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Electrical < 2023.1.4
  • Autodesk Autocad Electrical >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Lt < 2023.1.4
  • Autodesk Autocad Lt < 2024.1
  • Autodesk Autocad Lt >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Map 3d < 2023.1.4
  • Autodesk Autocad Map 3d >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Mechanical < 2023.1.4
  • Autodesk Autocad Mechanical >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Mep < 2023.1.4
  • Autodesk Autocad Mep >= 2024.0.0 and < 2024.1.1
  • Autodesk Autocad Plant 3d < 2023.1.4
  • Autodesk Autocad Plant 3d >= 2024.0.0 and < 2024.1.1
Patched Versions
  • Autodesk Autocad 2024.1
  • Autodesk Autocad 2023.1.4
  • Autodesk Autocad 2024.1.1
  • Autodesk Autocad Advance Steel 2023.1.4
  • Autodesk Autocad Advance Steel 2024.1.1
  • Autodesk Autocad Architecture 2023.1.4
  • Autodesk Autocad Architecture 2024.1.1
  • Autodesk Autocad Civil 3d 2023.1.4
  • Autodesk Autocad Civil 3d 2024.1.1
  • Autodesk Autocad Electrical 2023.1.4
  • Autodesk Autocad Electrical 2024.1.1
  • Autodesk Autocad Lt 2023.1.4
  • Autodesk Autocad Lt 2024.1
  • Autodesk Autocad Lt 2024.1.1
  • Autodesk Autocad Map 3d 2023.1.4
  • Autodesk Autocad Map 3d 2024.1.1
  • Autodesk Autocad Mechanical 2023.1.4
  • Autodesk Autocad Mechanical 2024.1.1
  • Autodesk Autocad Mep 2023.1.4
  • Autodesk Autocad Mep 2024.1.1
  • Autodesk Autocad Plant 3d 2023.1.4
  • Autodesk Autocad Plant 3d 2024.1.1
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.
🎁7-Day Free Trial — Try Pro or Team, no card required.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
📈EPSS Spike Alerts — Catch rising risk before it peaks.
🎯Custom EPSS/CVSS — Filter noise, focus on risk.
🛡️Exploit Intel — A 2nd confirmed-exploit signal beyond KEV.
🐙GitHub Issues — Auto-tracked, no duplicates.
📬Weekly Digest — One clean summary, not inbox spam.
🏷️Watchlist Groups — Tag alerts by team (Infra/AppSec/SOC).
💬Webhooks — Slack & Teams integration.
🔀Smart Routing — Critical alerts to one channel, rest to another.
🚫Ad-Free — Uninterrupted experience.

External References