7.8
High
CVE-2024-23136 A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference…
Description
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Architecture 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Architecture 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
Show the 46 other branches Hide the 46 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD Architecture 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Electrical 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Electrical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Electrical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Electrical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Mechanical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Mechanical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MEP 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MEP 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MEP 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Plant 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Plant 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Civil 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| Civil 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Civil 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Civil 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Civil 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Advance Steel 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| Advance Steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Advance Steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Advance Steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Advance Steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MAP 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MAP 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_advance_steel 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| autocad_advance_steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_advance_steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_advance_steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_advance_steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_civil_3d 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| autocad_civil_3d 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_civil_3d 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_civil_3d 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_civil_3d 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
References
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of AutoCAD
The 109 CVEs of AutoCAD →
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
High
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
High