7.8
Élevée
CVE-2024-23136 A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference…
Description
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AutoCAD 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Architecture 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Architecture 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Architecture 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Architecture 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
Afficher les 46 autres branches Masquer les 46 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| AutoCAD Architecture 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Electrical 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Electrical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Electrical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Electrical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Electrical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Mechanical 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Mechanical 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Mechanical 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Mechanical 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Mechanical 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MEP 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD MEP 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MEP 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MEP 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MEP 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD Plant 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD Plant 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD Plant 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD Plant 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD Plant 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Civil 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| Civil 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Civil 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Civil 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Civil 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| Advance Steel 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| Advance Steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| Advance Steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| Advance Steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| Advance Steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| AutoCAD MAP 3D 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| AutoCAD MAP 3D 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| AutoCAD MAP 3D 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| AutoCAD MAP 3D 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| AutoCAD MAP 3D 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_advance_steel 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| autocad_advance_steel 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_advance_steel 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_advance_steel 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_advance_steel 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
| autocad_civil_3d 2025 | 2025 → < 2025.0.1 | 2025.0.1 |
| autocad_civil_3d 2024 | 2024 → < 2024.1.3 | 2024.1.3 |
| autocad_civil_3d 2023 | 2023 → < 2023.1.5 | 2023.1.5 |
| autocad_civil_3d 2022 | 2022 → < 2022.1.4 | 2022.1.4 |
| autocad_civil_3d 2021 | 2021 → < 2021.1.4 | 2021.1.4 |
Références
- www.autodesk.com www.autodesk.com
- www.autodesk.com www.autodesk.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de AutoCAD
Les 109 CVE de AutoCAD →
CVE-2026-7406
A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference…
7.8
Élevée
CVE-2026-7405
A maliciously crafted TIF file, when parsed through certain Autodesk products during image import, can cause an…
5.5
Moyenne
CVE-2026-11803
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability
7.8
Élevée
CVE-2026-8325
A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability
7.8
Élevée