high7.8
CVE-2024-23133
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access viol…
Impact
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Autocad | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Architecture | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Electrical | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Mechanical | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Mep | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Plant 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Civil 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Advance Steel | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Map 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |