CVE-2024-23136

2024-02-2205:15:09

CWE-822

[email protected]

web.nvd.nist.gov

stp file

asmkern228a.dll

code execution

autodesk autocad

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.4%

JSON

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk AutoCAD can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

References

www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002

www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004