7.8
High
CVE-2024-37002 A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to…
Description
A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD Architecture 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD Architecture 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD Electrical 2025 | 2025 → < 2025.1 | 2025.1 |
Show the 27 other branches Hide the 27 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| AutoCAD Electrical 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD Electrical 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD Electrical 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD Mechanical 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD MEP 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD MEP 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD Plant 3D 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| Civil 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| Civil 3D 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| Civil 3D 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| Civil 3D 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| Advance Steel 2025 | 2025 → < 2025.1 | 2025.1 |
| Advance Steel 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| Advance Steel 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| Advance Steel 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.1 | 2025.1 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.4 | 2024.1.4 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.6 | 2023.1.6 |
| AutoCAD MAP 3D 2022 | 2022 → < 2022.1.5 | 2022.1.5 |
Other CVEs of AutoCAD
The 109 CVEs of AutoCAD →
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
High
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Medium
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
High