High severity7.8NVD Advisory· Published Oct 29, 2024· Updated Jun 17, 2026
CVE-2024-8597
CVE-2024-8597
Description
A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Affected products
18- cpe:2.3:a:autodesk:autocad_advance_steel:*:*:*:*:*:*:*:*Range: >=2025,<2025.1.1
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*range: >=2025,<2025.1.1
- cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*range: >=2025,<2025.1.1
- cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*range: >=2025,<2025.1.1
- cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*range: >=2025,<2025.1.1
- cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*range: 2025
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*range: >=2025,<2025.1.1
- cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*range: 2025
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.