Description (CNA)
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Autodesk / AutoCAD | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD Architecture | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD Electrical | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD Mechanical | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD MEP | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD Plant 3D | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / Civil 3D | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / Advance Steel | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
| Autodesk / AutoCAD MAP 3D | affected 2025 before 2025.0.1; affected 2024 before 2024.1.3; affected 2023 before 2023.1.5; affected 2022 before 2022.1.4; affected 2021 before 2021.1.4 |
CWE
CWE-822
References
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002
- https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.