VYPR
← All advisories
High severity7.8NVD Advisory· Published Feb 22, 2024· Updated Jun 17, 2026

CVE-2024-23136

CVE-2024-23136

Description

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected products

19
  • Autodesk/Advance Steel2 versions
    cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad2 versions
    cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Architecture2 versions
    cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Electrical2 versions
    cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Map 3d2 versions
    cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Mechanical2 versions
    cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Mep2 versions
    cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autocad Plant 3d2 versions
    cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Civil 3d2 versions
    cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*range: >=2021,<2021.1.4
    • cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*range: 2025
  • Autodesk/Autodesk applicationsllm-fuzzy

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.