cbcvebase.
CVE-2024-23137
published 2024-02-22

CVE-2024-23137: A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. This…

high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.

Affected

45 ranges· showing 25
VendorProductVersion rangeFixed in
autodeskadvance_steel>= 2021 < 2021.1.42021.1.4
autodeskadvance_steel>= 2022 < 2022.1.42022.1.4
autodeskadvance_steel>= 2023 < 2023.1.52023.1.5
autodeskadvance_steel>= 2024 < 2024.1.32024.1.3
autodeskadvance_steel>= 2025 < 2025.0.12025.0.1
autodeskautocad>= 2021 < 2021.1.42021.1.4
autodeskautocad>= 2022 < 2022.1.42022.1.4
autodeskautocad>= 2023 < 2023.1.52023.1.5
autodeskautocad>= 2024 < 2024.1.32024.1.3
autodeskautocad>= 2025 < 2025.0.12025.0.1
autodeskautocad_architecture>= 2021 < 2021.1.42021.1.4
autodeskautocad_architecture>= 2022 < 2022.1.42022.1.4
autodeskautocad_architecture>= 2023 < 2023.1.52023.1.5
autodeskautocad_architecture>= 2024 < 2024.1.32024.1.3
autodeskautocad_architecture>= 2025 < 2025.0.12025.0.1
autodeskautocad_electrical>= 2021 < 2021.1.42021.1.4
autodeskautocad_electrical>= 2022 < 2022.1.42022.1.4
autodeskautocad_electrical>= 2023 < 2023.1.52023.1.5
autodeskautocad_electrical>= 2024 < 2024.1.32024.1.3
autodeskautocad_electrical>= 2025 < 2025.0.12025.0.1
autodeskautocad_map_3d>= 2021 < 2021.1.42021.1.4
autodeskautocad_map_3d>= 2022 < 2022.1.42022.1.4
autodeskautocad_map_3d>= 2023 < 2023.1.52023.1.5
autodeskautocad_map_3d>= 2024 < 2024.1.32024.1.3
autodeskautocad_map_3d>= 2025 < 2025.0.12025.0.1