Design/Logic Flaw

2024-02-2205:15:00

PRIOn knowledge base

www.prio-n.com

autodesk

autocad

sldprt

parsing

vulnerability

code execution

user-after-free

7.5 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

JSON

A maliciously crafted SLDPRT file when ASMkern228A.dll parsed through Autodesk AutoCAD can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

References

www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002