CVE-2024-23133

CVE-2024-23133 affects Autodesk AutoCAD Desktop Software due to a vulnerability in parsing a malicious STP file (ASMDATAX228A.dll). The issue is described as a memory corruption via a write access violation, and, in combination with other vulnerabilities, could lead to code execution in the conte...

CVE-2024-23132 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file in atfdwgconsumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2024-23132 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file in atfdwgconsumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2024-23132

CVE-2024-23132 concerns Autodesk AutoCAD desktop software. A maliciously crafted STP file is processed by the atf_dwg_consumer.dll library, causing a memory corruption via a write-access violation. In the context of the current process, this can lead to code execution. Multiple sources corroborat...

CVE-2024-23131

Autodesk AutoCAD STP file parsing memory corruption vulnerability leading to remote code execution. The issue occurs when parsing STP files, with the memory corruption exploitable to run code in the current process. Descriptions from ZDI advisories confirm a remote code execution condition requir...

CVE-2024-23131 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to...

CVE-2024-23131 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to...

CVE-2024-23124

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-23124

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

Out-of-bounds

A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23124

The CVE-2024-23124 issue affects Autodesk AutoCAD via ASMIMPORT228A.dll when parsing STP files, causing an Out-of-Bounds Write that can crash, corrupt data, or allow arbitrary code execution in the current process. Public sources (e.g., ZDI) describe this as a remote code execution vulnerability ...

CVE-2024-23124 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-23120

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the...

CVE-2024-0446

A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in t...

Design/Logic Flaw

A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process...

CVE-2024-23120

CVE-2024-23120 (and related entries) describe a vulnerability in Autodesk AutoCAD where parsing malicious STP/STEP files via ASMIMPORT228A.dll and ASMIMPORT229A.dll can cause an Out-of-Bounds Write. The weakness is triggered during file parsing of STP/STEP content, potentially leading to a crash,...

CVE-2024-23120 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the...

PT-2024-19683 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted STP file in ASMDATAX228A.dll, when parsed through Autodesk applications, can lead to a memory corruption issue due to a write access violation. This issue, in...

PT-2024-7761

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description The issue is related to the parsing of maliciously crafted STP files in the stp aim x64 vc15d.dll library through Autodesk applications. This can lead to the use of uninitialized...

Autodesk AutoCAD STP File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ST...