CVE-2024-37002
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: psirt@autodesk.com (Secondary)
Description
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected (36)
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| 2022 ≤ version < 2022.1.5 |
Related CWEs
References (2)
Source: psirt@autodesk.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.