CVE-2024-37004

CVE-2024-37004 concerns Autodesk AutoCAD. What’s affected: AutoCAD desktop software; vulnerable code path occurs when parsing an SLDPRT file via the ASMKERN229A.dll module. Root cause: a use-after-free vulnerability in that parsing flow, as documented in the CVE description and corroborated by cr...

CVE-2024-37004 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-37004 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

CVE-2024-37003 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSWDLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of...

CVE-2024-37003 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSWDLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of...

CVE-2024-37001 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-37001

Summary (CVE-2024-37001) : A heap-based overflow in opennurbs.dll when parsing 3DM files through Autodesk AutoCAD can crash the process, read sensitive data, or allow arbitrary code execution. Connected sources attribute this to a boundary/length-check issue in 3DM parsing and identify AutoCAD (d...

CVE-2024-37001 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23149

CVE-2024-23149 affects Autodesk AutoCAD and involves parsing malicious SLDDRW files in the ODXSW_DLL.dll library. The vulnerability causes an Out-of-Bounds Read, leading to a crash, potential data exposure, or arbitrary code execution in the current process. Public details indicate the issue stem...

CVE-2024-23149 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted SLDDRW file, when parsed in ODXSWDLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23148

CVE-2024-23148 affects Autodesk AutoCAD via parsing of CATPRODUCT files in CC5Dll.dll, causing a memory corruption write-access violation that can lead to code execution in the current process. The issue is triggered by crafted CATPRODUCT content and is documented across multiple feeds (NVD, Red ...

CVE-2024-23147

CVE-2024-23147 concerns Autodesk AutoCAD memory corruption due to parsing malicious CATPART, X_B and STEP files in ASMKERN228A.dll and ASMKERN229A.dll. The vulnerability is described as a write access violation that, in conjunction with other vulnerabilities, can lead to code execution in the con...

CVE-2024-23146 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted XB and XT file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current...

CVE-2024-23145

CVE-2024-23145 relates to Autodesk AutoCAD parsing of PRT files via opennurbs.dll, causing an Out-of-Bounds Read that can crash, expose data, or allow arbitrary code execution. Affected context: AutoCAD with PRT parsing through opennurbs.dll; exploit path relies on processing a crafted PRT file. ...

CVE-2024-23145 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23142

A maliciously crafted CATPART, STP, and MODEL file, when parsed in atfdwgconsumer.dll, rosex64vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23143

A maliciously crafted 3DM, MODEL and XB file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary co...

CVE-2024-23141

A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

CVE-2024-23143

A maliciously crafted 3DM, MODEL and XB file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary co...

CVE-2024-23144

A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the...