Unrated severityNVD Advisory· Published Oct 29, 2024· Updated Aug 26, 2025

Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

CVE-2024-8597

Description

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.

Affected products

Autodesk/Advance Steelcpe-rescue
cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocadv52 versions
cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*range: 2025
- (no CPE)
Autodesk/Autocad Architecturecpe-rescue
cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocad Electricalcpe-rescue
cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocad Map 3dcpe-rescue
cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocad Mechanicalcpe-rescue
cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocad Mepcpe-rescue
cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Autocad Plant 3dcpe-rescue
cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
Range: 2025
Autodesk/Civil 3Dcpe-rescue
cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
Range: 2025

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability

Description

Affected products

Patches

Vulnerability mechanics

References

News mentions