← Back

CVE-2024-23142

nvd nist
Published: Jun 25, 2024Modified: Dec 31, 2025

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)

Description

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.

Affected (36)

Autodesk
9 products
Autocad
Autocad Architecture
Autocad Electrical
Autocad Map 3d
Autocad Mechanical
Autocad Mep
Autocad Plant 3d
Civil 3d
Advance Steel
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad
From 2022 to 2022.1.5
Autocad
From 2023 to 2023.1.6
Autocad
From 2024 to 2024.1.4
Autocad
From 2025 to 2025.1
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Architecture
From 2022 to 2022.1.5
Autocad Architecture
From 2023 to 2023.1.6
Autocad Architecture
From 2024 to 2024.1.4
Autocad Architecture
From 2025 to 2025.1
Configuration C
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Electrical
From 2022 to 2022.1.5
Autocad Electrical
From 2023 to 2023.1.6
Autocad Electrical
From 2024 to 2024.1.4
Autocad Electrical
From 2025 to 2025.1
Configuration D
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Map 3d
From 2022 to 2022.1.5
Autocad Map 3d
From 2023 to 2023.1.6
Autocad Map 3d
From 2024 to 2024.1.4
Autocad Map 3d
From 2025 to 2025.1
Configuration E
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Mechanical
From 2022 to 2022.1.5
Autocad Mechanical
From 2023 to 2023.1.6
Autocad Mechanical
From 2024 to 2024.1.4
Autocad Mechanical
From 2025 to 2025.1
Configuration F
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Mep
From 2022 to 2022.1.5
Autocad Mep
From 2023 to 2023.1.6
Autocad Mep
From 2024 to 2024.1.4
Autocad Mep
From 2025 to 2025.1
Configuration G
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Autocad Plant 3d
From 2022 to 2022.1.5
Autocad Plant 3d
From 2023 to 2023.1.6
Autocad Plant 3d
From 2024 to 2024.1.4
Autocad Plant 3d
From 2025 to 2025.1
Configuration H
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Civil 3d
From 2022 to 2022.1.5
Civil 3d
From 2023 to 2023.1.6
Civil 3d
From 2024 to 2024.1.4
Civil 3d
From 2025 to 2025.1
Configuration I
4 vulnerable
Vulnerable SoftwareAffected Versions
Autodesk
Advance Steel
From 2022 to 2022.1.5
Advance Steel
From 2023 to 2023.1.6
Advance Steel
From 2024 to 2024.1.4
Advance Steel
From 2025 to 2025.1

Related CWEs

CWE-416
Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

References (2)

Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.