high7.8
CVE-2024-37002
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables.
Impact
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Autodesk | Autocad | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Architecture | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Electrical | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Map 3d | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Mechanical | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Mep | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Autocad Plant 3d | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Civil 3d | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |
| Autodesk | Advance Steel | from 2022 before 2022.1.5 from 2023 before 2023.1.6 from 2024 before 2024.1.4 from 2025 before 2025.1 |