Description
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Reserved 2024-01-11 | Published 2024-02-21 | Updated 2025-02-10 | Assigner
autodeskHIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Problem types
CWE-787 Out-of-bounds Write
Product status
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unknown
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
Default status
unaffected
2025 before 2025.0.1
affected
2024 before 2024.1.3
affected
2023 before 2023.1.5
affected
2022 before 2022.1.4
affected
2021 before 2021.1.4
affected
References
www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002
www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004
www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009
cve.org (CVE-2024-23120)
nvd.nist.gov (CVE-2024-23120)
Download JSON
