high7.8
CVE-2024-23136
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer.
Impact
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Autocad Electrical | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Mechanical | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Mep | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Plant 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Civil 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Advance Steel | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Map 3d | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |
| Autodesk | Autocad Architecture | from 2021 before 2021.1.4 from 2022 before 2022.1.4 from 2023 before 2023.1.5 from 2024 before 2024.1.3 from 2025 before 2025.0.1 |