CVE-2024-23136

Published: Feb 22, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected (45)

Products: Autodesk: Autocad Electrical, Autocad Mechanical, Autocad Mep, Autocad Plant 3d, Civil 3d, Advance Steel, Autocad Map 3d, Autocad, Autocad Architecture

9 products

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Electrical	2021 ≤ version < 2021.1.4
Autodesk Autocad Electrical	2022 ≤ version < 2022.1.4
Autodesk Autocad Electrical	2023 ≤ version < 2023.1.5
Autodesk Autocad Electrical	2024 ≤ version < 2024.1.3
Autodesk Autocad Electrical	2025 ≤ version < 2025.0.1

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Mechanical	2021 ≤ version < 2021.1.4
Autodesk Autocad Mechanical	2022 ≤ version < 2022.1.4
Autodesk Autocad Mechanical	2023 ≤ version < 2023.1.5
Autodesk Autocad Mechanical	2024 ≤ version < 2024.1.3
Autodesk Autocad Mechanical	2025 ≤ version < 2025.0.1

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Mep	2021 ≤ version < 2021.1.4
Autodesk Autocad Mep	2022 ≤ version < 2022.1.4
Autodesk Autocad Mep	2023 ≤ version < 2023.1.5
Autodesk Autocad Mep	2024 ≤ version < 2024.1.3
Autodesk Autocad Mep	2025 ≤ version < 2025.0.1

Configuration D

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Plant 3d	2021 ≤ version < 2021.1.4
Autodesk Autocad Plant 3d	2022 ≤ version < 2022.1.4
Autodesk Autocad Plant 3d	2023 ≤ version < 2023.1.5
Autodesk Autocad Plant 3d	2024 ≤ version < 2024.1.3
Autodesk Autocad Plant 3d	2025 ≤ version < 2025.0.1

Configuration E

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Civil 3d	2021 ≤ version < 2021.1.4
Autodesk Civil 3d	2022 ≤ version < 2022.1.4
Autodesk Civil 3d	2023 ≤ version < 2023.1.5
Autodesk Civil 3d	2024 ≤ version < 2024.1.3
Autodesk Civil 3d	2025 ≤ version < 2025.0.1

Configuration F

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Advance Steel	2021 ≤ version < 2021.1.4
Autodesk Advance Steel	2022 ≤ version < 2022.1.4
Autodesk Advance Steel	2023 ≤ version < 2023.1.5
Autodesk Advance Steel	2024 ≤ version < 2024.1.3
Autodesk Advance Steel	2025 ≤ version < 2025.0.1

Configuration G

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Map 3d	2021 ≤ version < 2021.1.4
Autodesk Autocad Map 3d	2022 ≤ version < 2022.1.4
Autodesk Autocad Map 3d	2023 ≤ version < 2023.1.5
Autodesk Autocad Map 3d	2024 ≤ version < 2024.1.3
Autodesk Autocad Map 3d	2025 ≤ version < 2025.0.1

Configuration H

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad	2021 ≤ version < 2021.1.4
Autodesk Autocad	2022 ≤ version < 2022.1.4
Autodesk Autocad	2023 ≤ version < 2023.1.5
Autodesk Autocad	2024 ≤ version < 2024.1.3
Autodesk Autocad	2025 ≤ version < 2025.0.1

Configuration I

5 vulnerable

Vulnerable Software	Affected Versions
Autodesk Autocad Architecture	2021 ≤ version < 2021.1.4
Autodesk Autocad Architecture	2022 ≤ version < 2022.1.4
Autodesk Autocad Architecture	2023 ≤ version < 2023.1.5
Autodesk Autocad Architecture	2024 ≤ version < 2024.1.3
Autodesk Autocad Architecture	2025 ≤ version < 2025.0.1