CVE-2024-23132 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
Problem types: cwe_id: CWE-119
description: CWE-119 Memory Corruption - Generic
Affected products: vendor: Autodesk
product: AutoCAD
cpes: cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Architecture
cpes: cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Electrical
cpes: cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Mechanical
cpes: cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD MEP
cpes: cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD Plant 3D
cpes: cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: Civil 3D
cpes: cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: Advance Steel
cpes: cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
default_status: unaffected
vendor: Autodesk
product: AutoCAD MAP 3D
cpes: cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-02-22T04:10:53.175Z