An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018,…

Description

An exploitable heap overflow vulnerability in the AcCellMargin handling code in Autodesk Advance Steel 2018, Autodesk AutoCAD 2018, Autodesk AutoCAD Architecture 2018, Autodesk AutoCAD Electrical 2018, Autodesk AutoCAD Map 3D 2018, Autodesk AutoCAD Mechanical 2018, Autodesk AutoCAD MEP 2018, Autodesk AutoCAD P&ID 2018, Autodesk AutoCAD Plant 3D 2018, Autodesk AutoCAD LT 2018, and Autodesk Civil 3D 2018. A specially crafted DXF file with too many cell margins populating an AcCellMargin object may cause a heap overflow, resulting in code execution.

Scores

EPSS (exploitation in 30 days)

1.6% · top 24% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

• Use After Free
• CWE-787 (opens in a new tab)All about CWE-787 and its CVEs

Affected products

• Autodesk · Autodesk Advance Steel

  • affected 2018

• Autodesk · Autodesk AutoCAD

  • affected 2018

• Autodesk · Autodesk AutoCAD Architecture

  • affected 2018

• Autodesk · Autodesk AutoCAD Electrical

  • affected 2018

• Autodesk · Autodesk AutoCAD Map 3D

  • affected 2018

• Autodesk · Autodesk AutoCAD Mechanical

  • affected 2018

• Autodesk · Autodesk AutoCAD MEP

  • affected 2018

• Autodesk · Autodesk AutoCAD P&ID

  • affected 2018

• Autodesk · Autodesk AutoCAD Plant 3D

  • affected 2018

• Autodesk · Autodesk AutoCAD LT

  • affected 2018

• Autodesk · Autodesk Civil 3D

  • affected 2018

References (1)

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2019-0001 (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2019-7359](https://trackcve.app/badge/CVE-2019-7359.svg)](https://trackcve.app/cve/CVE-2019-7359)

Record last updated 4 Aug 2024, 20:46 UTC.