CVE-2024-23124

🗓️ 22 Feb 2024 03:15:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 16 Views

Malicious STP file exploit in Autodesk AutoCA

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Autodesk Multiple Vulnerabilities (AutoCAD) (adsk-sa-2024-0004)	28 Mar 202400:00	–	nessus
BDU FSTEC	The vulnerability of the ASMIMPORT228A.dll library in the AutoCAD simulation, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.	18 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-23124	22 Feb 202404:26	–	circl
CNNVD	Autodesk AutoCAD Buffer Error Vulnerability	22 Feb 202400:00	–	cnnvd
CVE	CVE-2024-23124	22 Feb 202402:14	–	cve
Cvelist	CVE-2024-23124 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software	22 Feb 202402:14	–	cvelist
EUVD	EUVD-2024-20643	3 Oct 202520:07	–	euvd
OSV	CVE-2024-23124	22 Feb 202403:15	–	osv
Prion	Out-of-bounds	22 Feb 202403:15	–	prion
Positive Technologies	PT-2023-9685	28 Jun 202300:00	–	ptsecurity

NVD

Node

autodesk autocadRange2021–2021.1.4

OR

autodesk autocadRange2022–2022.1.4

OR

autodesk autocadRange2023–2023.1.5

OR

autodesk autocadRange2024–2024.1.3

OR

autodesk autocadRange2025–2025.0.1

Node

autodesk autocad_architectureRange2021–2021.1.4

OR

autodesk autocad_architectureRange2022–2022.1.4

OR

autodesk autocad_architectureRange2023–2023.1.5

OR

autodesk autocad_architectureRange2024–2024.1.3

OR

autodesk autocad_architectureRange2025–2025.0.1

Node

autodesk autocad_electricalRange2021–2021.1.4

OR

autodesk autocad_electricalRange2022–2022.1.4

OR

autodesk autocad_electricalRange2023–2023.1.5

OR

autodesk autocad_electricalRange2024–2024.1.3

OR

autodesk autocad_electricalRange2025–2025.0.1

Node

autodesk autocad_mechanicalRange2021–2021.1.4

OR

autodesk autocad_mechanicalRange2022–2022.1.4

OR

autodesk autocad_mechanicalRange2023–2023.1.5

OR

autodesk autocad_mechanicalRange2024–2024.1.3

OR

autodesk autocad_mechanicalRange2025–2025.0.1

Node

autodesk autocad_mepRange2021–2021.1.4

OR

autodesk autocad_mepRange2022–2022.1.4

OR

autodesk autocad_mepRange2023–2023.1.5

OR

autodesk autocad_mepRange2024–2024.1.3

OR

autodesk autocad_mepRange2025–2025.0.1

Node

autodesk autocad_plant_3dRange2021–2021.1.4

OR

autodesk autocad_plant_3dRange2022–2022.1.4

OR

autodesk autocad_plant_3dRange2023–2023.1.5

OR

autodesk autocad_plant_3dRange2024–2024.1.3

OR

autodesk autocad_plant_3dRange2025–2025.0.1

Node

autodesk civil_3dRange2021–2021.1.4

OR

autodesk civil_3dRange2022–2022.1.4

OR

autodesk civil_3dRange2023–2023.1.5

OR

autodesk civil_3dRange2024–2024.1.3

OR

autodesk civil_3dRange2025–2025.0.1

Node

autodesk advance_steelRange2021–2021.1.4

OR

autodesk advance_steelRange2022–2022.1.4

OR

autodesk advance_steelRange2023–2023.1.5

OR

autodesk advance_steelRange2024–2024.1.3

OR

autodesk advance_steelRange2025–2025.0.1

Node

autodesk autocad_map_3dRange2021–2021.1.4

OR

autodesk autocad_map_3dRange2022–2022.1.4

OR

autodesk autocad_map_3dRange2023–2023.1.5

OR

autodesk autocad_map_3dRange2024–2024.1.3

OR

autodesk autocad_map_3dRange2025–2025.0.1

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004

13 Nov 2025 20:01Current

7High risk

Vulners AI Score7

CVSS 3.17.8

EPSS0.00554

stp file autodesk autocad out-of-bound write malicious actor vulnerability