Description

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Classification

CVE ID: CVE-2024-23136

CVSS Base Severity: HIGH

CVSS Base Score: 7.8

Affected Products

Vendor: Autodesk

Product: AutoCAD

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.05% (probability of being exploited)

EPSS Percentile: 18.77% (scored less or equal to compared to others)

EPSS Date: 2025-02-25 (when was this score calculated)

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002
https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004

Timeline