High severity7.8NVD Advisory· Published Jun 25, 2024· Updated Jun 17, 2026
CVE-2024-23147
CVE-2024-23147
Description
A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
Affected products
19cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*range: >=2022,<2022.1.5
- cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*range: 2025
Patches
Vulnerability mechanics
References
1- www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009nvdVendor Advisory
News mentions
0No linked articles in our index yet.