CVE-2024-23136

2024-02-2205:15:09

CWE-822

[email protected]

web.nvd.nist.gov

1934

stp file

autodesk autocad

code execution

security vulnerability

asmkern228a.dll

nvd

cve-2024-23136

7.2 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

15.8%

JSON

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk AutoCAD can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

References

www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002

www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004