CVE-2024-37002

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

• autodesk autocad (>= 2022 < 2022.1.5) • autodesk autocad (>= 2023 < 2023.1.6) • autodesk autocad (>= 2024 < 2024.1.4) • autodesk autocad (>= 2025 < 2025.1) • autodesk autocad architecture (>= 2022 < 2022.1.5) • autodesk autocad architecture (>= 2023 < 2023.1.6) • autodesk autocad architecture (>= 2024 < 2024.1.4) • autodesk autocad architecture (>= 2025 < 2025.1) • autodesk autocad electrical (>= 2022 < 2022.1.5) • autodesk autocad electrical (>= 2023 < 2023.1.6) • autodesk autocad electrical (>= 2024 < 2024.1.4) • autodesk autocad electrical (>= 2025 < 2025.1) • autodesk autocad map 3d (>= 2022 < 2022.1.5) • autodesk autocad map 3d (>= 2023 < 2023.1.6) • autodesk autocad map 3d (>= 2024 < 2024.1.4) • autodesk autocad map 3d (>= 2025 < 2025.1) • autodesk autocad mechanical (>= 2022 < 2022.1.5) • autodesk autocad mechanical (>= 2023 < 2023.1.6) • autodesk autocad mechanical (>= 2024 < 2024.1.4) • autodesk autocad mechanical (>= 2025 < 2025.1) • autodesk autocad mep (>= 2022 < 2022.1.5) • autodesk autocad mep (>= 2023 < 2023.1.6) • autodesk autocad mep (>= 2024 < 2024.1.4) • autodesk autocad mep (>= 2025 < 2025.1) • autodesk autocad plant 3d (>= 2022 < 2022.1.5) • autodesk autocad plant 3d (>= 2023 < 2023.1.6) • autodesk autocad plant 3d (>= 2024 < 2024.1.4) • autodesk autocad plant 3d (>= 2025 < 2025.1) • autodesk civil 3d (>= 2022 < 2022.1.5) • autodesk civil 3d (>= 2023 < 2023.1.6) • autodesk civil 3d (>= 2024 < 2024.1.4) • autodesk civil 3d (>= 2025 < 2025.1) • autodesk advance steel (>= 2022 < 2022.1.5) • autodesk advance steel (>= 2023 < 2023.1.6) • autodesk advance steel (>= 2024 < 2024.1.4) • autodesk advance steel (>= 2025 < 2025.1)