CVE-2024-23136
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)
Description
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected (45)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| From 2021 to 2021.1.4 |
References (4)
Source: psirt@autodesk.com
Vendor Advisory
Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.