Description (CNA)
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Autodesk / AutoCAD | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD Architecture | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD Electrical | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD Mechanical | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD MEP | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD Plant 3D | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / Civil 3D | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / Advance Steel | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
| Autodesk / AutoCAD MAP 3D | affected 2025 before 2025.1; affected 2024 before 2024.1.4; affected 2023 before 2023.1.6; affected 2022 before 2022.1.5 |
CWE
CWE-457
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.