CVE-2024-8597

Autodesk AutoCAD: CVE-2024-8597 affects STEP/STP parsing in ASMDATAX230A.dll. The vulnerability is described as a memory corruption that can crash the process or allow code execution. Exploitation requires user interaction (per ZDI advisory), and exists when parsing a malicious STEP/STP file. Aff...

CVE-2024-8597: Improper Restriction of Operations within the Bounds of a Memory Buffer

A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...