CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

CVE-2024-21912 (GCVE-0-2024-21912)

Vulnerability from cvelistv5 – Published: 2024-03-26 15:34 – Updated: 2024-08-05 16:44
VLAI
Title
Rockwell Automation Arena Simulation vulnerable to out of bounds write
Summary
An arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Rockwell Automation Arena Simulation Affected: Version 16.00 - 16.20.02
Create a notification for this product.
rockwellautomation arena_simulation Affected: 16.00 , < 16.20.03 (custom)
    cpe:2.3:a:rockwellautomation:arena_simulation:16.00.00:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2024-03-26 14:00
Credits
Michael Heinzl
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:35:34.363Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:rockwellautomation:arena_simulation:16.00.00:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "arena_simulation",
            "vendor": "rockwellautomation",
            "versions": [
              {
                "lessThan": "16.20.03",
                "status": "affected",
                "version": "16.00",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21912",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-05T16:38:18.444663Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-08-05T16:44:27.351Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Arena Simulation",
          "vendor": "Rockwell Automation",
          "versions": [
            {
              "status": "affected",
              "version": "Version 16.00 - 16.20.02"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Michael Heinzl"
        }
      ],
      "datePublic": "2024-03-26T14:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eAn arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nAn arbitrary code execution vulnerability in Rockwell Automation Arena Simulation could let a malicious user insert unauthorized code into the software. This is done by writing beyond the designated memory area, which causes an access violation. Once inside, the threat actor can run harmful code on the system. This affects the confidentiality, integrity, and availability of the product. To trigger this, the user would unwittingly need to open a malicious file shared by the threat actor.\n\n"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-26T15:34:35.837Z",
        "orgId": "b73dd486-f505-4403-b634-40b078b177f0",
        "shortName": "Rockwell"
      },
      "references": [
        {
          "url": "https://www.rockwellautomation.com/en-us/support/advisory.SD-1665.html"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Update to v16.20.03"
            }
          ],
          "value": "Update to v16.20.03"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Rockwell Automation Arena Simulation vulnerable to out of bounds write",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b73dd486-f505-4403-b634-40b078b177f0",
    "assignerShortName": "Rockwell",
    "cveId": "CVE-2024-21912",
    "datePublished": "2024-03-26T15:34:35.837Z",
    "dateReserved": "2024-01-03T16:40:50.367Z",
    "dateUpdated": "2024-08-05T16:44:27.351Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-21972 (GCVE-0-2024-21972)

Vulnerability from cvelistv5 – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
AMD
Impacted products
Date Public
2024-04-09 16:23
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21972",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-23T20:24:56.540837Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-24T18:06:16.832Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T18:23:17.557Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
          },
          {
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1848"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "AMD Software: Adrenalin Edition ",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "12.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Software: PRO Edition",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "24.Q1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T16:23:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-23T16:36:03.933Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21972",
    "datePublished": "2024-04-23T16:36:03.933Z",
    "dateReserved": "2024-01-03T16:43:30.196Z",
    "dateUpdated": "2025-11-04T18:23:17.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-21979 (GCVE-0-2024-21979)

Vulnerability from cvelistv5 – Published: 2024-04-23 16:36 – Updated: 2025-11-04 18:23
VLAI
Summary
An out of bounds write vulnerability in the AMD Radeon™ user mode driver for DirectX® 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
AMD
Impacted products
Vendor Product Version
AMD AMD Software: Adrenalin Edition Affected: 0 , < 12.1.1 (custom)
Create a notification for this product.
AMD AMD Software: PRO Edition Affected: 0 , < 24.Q1 (custom)
Create a notification for this product.
amd radeon_directx_11_driver_dll Affected: *
    cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2024-04-09 16:23
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:amd:radeon_directx_11_driver_dll:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "radeon_directx_11_driver_dll",
            "vendor": "amd",
            "versions": [
              {
                "status": "affected",
                "version": "*"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-21979",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-23T18:58:00.311801Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:37:40.519Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T18:23:18.731Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
          },
          {
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1847"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "AMD Software: Adrenalin Edition ",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "12.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unknown",
          "product": "AMD Software: PRO Edition",
          "vendor": "AMD",
          "versions": [
            {
              "lessThan": "24.Q1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2024-04-09T16:23:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\n\n\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003eAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u003c/span\u003e\u00ae\u003cspan style=\"background-color: rgb(248, 249, 250);\"\u003e\u0026nbsp;11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\u003c/span\u003e\n\n"
            }
          ],
          "value": "\nAn out of bounds write vulnerability in the AMD Radeon\u2122 user mode driver for DirectX\u00ae\u00a011 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-23T16:36:38.556Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6012.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2024-21979",
    "datePublished": "2024-04-23T16:36:38.556Z",
    "dateReserved": "2024-01-03T16:43:30.197Z",
    "dateUpdated": "2025-11-04T18:23:18.731Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-22448 (GCVE-0-2024-22448)

Vulnerability from cvelistv5 – Published: 2024-04-10 07:30 – Updated: 2024-08-01 22:43
VLAI
Summary
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
SSVC
Exploitation: none Automatable: no Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
Impacted products
Vendor Product Version
Dell CPG BIOS Affected: N/A , < 1.29.0 (semver)
Affected: N/A , < 1.16.0 (semver)
Affected: N/A , < 1.13.0 (semver)
Affected: N/A , < 1.28.0 (semver)
Affected: N/A , < 1.14.0 (semver)
Affected: N/A , < 1.31.0 (semver)
Affected: N/A , < 1.31.1 (semver)
Affected: N/A , < 1.31.2 (semver)
Affected: N/A , < 1.31.3 (semver)
Affected: N/A , < 1.31.4 (semver)
Affected: N/A , < 1.31.5 (semver)
Affected: N/A , < 1.31.6 (semver)
Affected: N/A , < 1.31.7 (semver)
Affected: N/A , < 1.31.8 (semver)
Affected: N/A , < 1.31.9 (semver)
Affected: N/A , < 1.31.10 (semver)
Affected: N/A , < 1.31.11 (semver)
Affected: N/A , < 1.31.12 (semver)
Affected: N/A , < 1.31.13 (semver)
Affected: N/A , < 1.31.14 (semver)
Affected: N/A , < 1.31.15 (semver)
Affected: N/A , < 1.31.16 (semver)
Create a notification for this product.
dell alienware_16_r1 Affected: 0 , < 1.13.0 (semver)
    cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_15_r6 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_18_r1 Affected: 0 , < 1.16.0 (semver)
    cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*
Create a notification for this product.
dell alienware_14_r2 Affected: 0 , < 1.13.0 (semver)
    cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g15_5511 Affected: 0 , < 1.28.0 (semver)
    cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g15_5530 Affected: 0 , < 1.14.0 (semver)
    cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g16_7620 Affected: 0 , < 1.14.0 (semver)
    cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g3_3500 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g5_5500 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g7_7500 Affected: 0 , < 1.31.0 (semver)
    cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*
Create a notification for this product.
dell g7_7700 Affected: 0 , < 1.31.0 (semver)
    cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_13_5330 Affected: 0 , < 1.14.0 (semver)
    cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_15_3530 Affected: 0 , < 1.10.0 (semver)
    cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_3030s Affected: 0 , < 1.3.0 (semver)
    cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5301 Affected: 0 , < 1.32.0 (semver)
    cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5400 Affected: 0 , < 1.27.0 (semver)
    cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5401 Affected: 0 , < 1.27.0 (semver)
    cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5402 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5409 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5502 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_5509 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_7300 Affected: - , < 1.32.0 (semver)
    cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_7400 Affected: 0 , < 1.32.0 (semver)
    cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*
Create a notification for this product.
dell inspiron_7700_aio Affected: 0 , < 1.27.0 (semver)
    cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5310 Affected: 0 , < 1.23.0 (semver)
    cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5310_2_in_1 Affected: 0 , < 1.23.0 (semver)
    cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5330 Affected: 0 , < 1.321.0 (semver)
    cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5340 Affected: 0 , < 1.12.0 (semver)
    cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5531 Affected: - , < 1.22.0 (semver)
    cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_5540 Affected: 0 , < 1.12.0 (semver)
    cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7320 Affected: - , < 1.34.0 (semver)
    cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7340 Affected: 0 , < 1.13.0 (semver)
    cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7420 Affected: - , < 1.34.0 (semver)
    cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_7520 Affected: 0 , < 1.34.0 (semver)
    cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_9330 Affected: 0 , < 1.19.0 (semver)
    cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_9420 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_9430 Affected: - , < 1.22.0 (semver)
    cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*
Create a notification for this product.
dell latitude_9440_2in1 Affected: 0 , < 1.10.0 (semver)
    cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_micro_7010 Affected: 0 , < 1.13.1 (semver)
    cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_small_form_factor_7010 Affected: 0 , < 1.13.1 (semver)
    cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*
Create a notification for this product.
dell optiplex_tower_7010 Affected: 0 , < 1.13.1 (semver)
    cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3440 Affected: 0 , < 1.25.0 (semver)
    cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3571 Affected: 0 , < 1.22.0 (semver)
    cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3580 Affected: 0 , < 1.12.0 (semver)
    cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3581 Affected: 0 , < 1.12.0 (semver)
    cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_3660 Affected: - , < 2.13.0 (semver)
    cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_5570 Affected: 0 , < 1.22.0 (semver)
    cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_5750 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*
Create a notification for this product.
dell precision_5770 Affected: 0 , < 1.24.0 (semver)
    cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_14_3430 Affected: 0 , < 1.10.0 (semver)
    cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_15_3530 Affected: 0 , < 1.10.0 (semver)
    cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_3030s Affected: 0 , < 1.3.0 (semver)
    cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_5301 Affected: 0 , < 1.32.0 (semver)
    cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_5402 Affected: 0 , < 1.29.0 (semver)
    cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_5502 Affected: - , < 1.29.0 (semver)
    cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*
Create a notification for this product.
dell vostro_5880 Affected: 0 , < 1.25.0 (semver)
    cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*
Create a notification for this product.
dell xps_17_9700 Affected: 0 , < 1.24.0 (semver)
    cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*
Create a notification for this product.
dell xps_17_9730 Affected: 0 , < 1.11.0 (semver)
    cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*
Create a notification for this product.
dell xps_9315_2in1 Affected: 0 , < 1.15.0 (semver)
    cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*
Create a notification for this product.
Date Public
2024-04-09 06:30
Credits
Dell Technologies would like to thank Eason for reporting this issue.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:dell:alienware_16_r1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "alienware_16_r1",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:alienware_15_r6:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "alienware_15_r6",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:alienware_18_r1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "alienware_18_r1",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.16.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:alienware_14_r2:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "alienware_14_r2",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g15_5511:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g15_5511",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.28.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g15_5530:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g15_5530",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.14.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g16_7620:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g16_7620",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.14.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g3_3500",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g5_5500",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g7_7500",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.31.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "g7_7700",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.31.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_13_5330:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_13_5330",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.14.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:inspiron_15_3530:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_15_3530",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:inspiron_3030s:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_3030s",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5301",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.32.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5400:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5400",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.27.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5401",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.27.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5402",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5409",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5502",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_5509",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_7300",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.32.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_7400",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.32.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:inspiron_7700_aio:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "inspiron_7700_aio",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.27.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5310",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.23.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_5310_2_in_1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5310_2_in_1",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.23.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_5330:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5330",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.321.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:latitude_5340:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5340",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_5531:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5531",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:latitude_5540:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_5540",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_7320",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.34.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:latitude_7340:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_7340",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_7420",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.34.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_7520",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.34.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_9330:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_9330",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.19.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_9420:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_9420",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:latitude_9430:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_9430",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:latitude_9440_2in1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "latitude_9440_2in1",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:optiplex_micro_7010:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "optiplex_micro_7010",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:optiplex_small_form_factor_7010:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "optiplex_small_form_factor_7010",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:optiplex_tower_7010:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "optiplex_tower_7010",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.13.1",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_3440",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.25.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_3571:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_3571",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:dell:precision_3580:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_3580",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_3581:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_3581",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.12.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_3660:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_3660",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "2.13.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_5570:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_5570",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.22.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_5750:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_5750",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:precision_5770:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "precision_5770",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.24.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_14_3430:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_14_3430",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_15_3530:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_15_3530",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.10.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_3030s:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_3030s",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_5301",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.32.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_5402",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_5502",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.29.0",
                "status": "affected",
                "version": "-",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vostro_5880",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.25.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xps_17_9700",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.24.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:xps_17_9730:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xps_17_9730",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.11.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:h:dell:xps_9315_2in1:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "xps_9315_2in1",
            "vendor": "dell",
            "versions": [
              {
                "lessThan": "1.15.0",
                "status": "affected",
                "version": "0",
                "versionType": "semver"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-22448",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-04-22T16:57:10.462584Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-06-04T17:52:58.050Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:43:34.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "CPG BIOS",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "1.29.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.16.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.13.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.28.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.14.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.0",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.1",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.2",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.3",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.4",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.5",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.6",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.7",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.8",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.9",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.10",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.11",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.12",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.13",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.14",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.15",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            },
            {
              "lessThan": "1.31.16",
              "status": "affected",
              "version": "N/A",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Dell Technologies would like to thank Eason for reporting this issue."
        }
      ],
      "datePublic": "2024-04-09T06:30:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
            }
          ],
          "value": "Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787: Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-04-10T07:30:08.507Z",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.dell.com/support/kbdoc/en-us/000221744/dsa-2024-066"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2024-22448",
    "datePublished": "2024-04-10T07:30:08.507Z",
    "dateReserved": "2024-01-10T15:26:10.250Z",
    "dateUpdated": "2024-08-01T22:43:34.907Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23120 (GCVE-0-2024-23120)

Vulnerability from cvelistv5 – Published: 2024-02-21 23:36 – Updated: 2025-08-26 20:16
VLAI
Title
Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Summary
A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk AutoCAD Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Architecture Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Electrical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Mechanical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MEP Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Plant 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Civil 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Advance Steel Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MAP 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_electrical Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_map_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_advance_steel Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_civil_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_architecture Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_mechanical Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_mep Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_plant_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_electrical",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_map_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_advance_steel",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_civil_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_architecture",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_mechanical",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_mep",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_plant_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23120",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-07-26T16:45:26.511301Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:16:04.049Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:30.563Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MAP 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-26T17:27:52.720Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23120",
    "datePublished": "2024-02-21T23:36:13.617Z",
    "dateReserved": "2024-01-11T21:46:45.745Z",
    "dateUpdated": "2025-08-26T20:16:04.049Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23121 (GCVE-0-2024-23121)

Vulnerability from cvelistv5 – Published: 2024-02-22 01:18 – Updated: 2025-08-28 14:34
VLAI
Title
Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Summary
A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk AutoCAD Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Architecture Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Electrical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Mechanical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MEP Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Plant 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Civil 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Advance Steel Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MAP 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_electrical Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_map_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_plant_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_advance_steel Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_civil_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_architecture Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_mechanical Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_mep Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_electrical",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_map_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_plant_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_advance_steel",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_civil_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_architecture",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_mechanical",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_mep",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23121",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T14:39:38.054542Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:16:32.093Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:31.662Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MAP 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-28T14:34:10.267Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23121",
    "datePublished": "2024-02-22T01:18:23.487Z",
    "dateReserved": "2024-01-11T21:46:45.745Z",
    "dateUpdated": "2025-08-28T14:34:10.267Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23122 (GCVE-0-2024-23122)

Vulnerability from cvelistv5 – Published: 2024-02-22 01:36 – Updated: 2025-08-28 14:33
VLAI
Title
Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Summary
A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk AutoCAD Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Architecture Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Electrical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Mechanical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MEP Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Plant 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Civil 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Advance Steel Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MAP 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_advance_steel Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_civil_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_advance_steel",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_civil_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23122",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T14:39:23.052424Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:16:49.025Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:30.749Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MAP 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-28T14:33:40.063Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23122",
    "datePublished": "2024-02-22T01:36:34.080Z",
    "dateReserved": "2024-01-11T21:46:45.745Z",
    "dateUpdated": "2025-08-28T14:33:40.063Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23123 (GCVE-0-2024-23123)

Vulnerability from cvelistv5 – Published: 2024-02-22 01:38 – Updated: 2025-08-28 14:33
VLAI
Title
Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Summary
A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk AutoCAD Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Architecture Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Electrical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Mechanical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MEP Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Plant 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Civil 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Advance Steel Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MAP 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_advance_steel Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_civil_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_advance_steel",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_civil_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23123",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T14:40:30.040434Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:17:15.174Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:30.726Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MAP 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-28T14:33:10.699Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23123",
    "datePublished": "2024-02-22T01:38:25.066Z",
    "dateReserved": "2024-01-11T21:46:45.746Z",
    "dateUpdated": "2025-08-28T14:33:10.699Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23124 (GCVE-0-2024-23124)

Vulnerability from cvelistv5 – Published: 2024-02-22 02:14 – Updated: 2025-08-26 20:17
VLAI
Title
Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
Summary
A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk AutoCAD Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Architecture Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Electrical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Mechanical Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MEP Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD Plant 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Civil 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk Advance Steel Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*
Create a notification for this product.
Autodesk AutoCAD MAP 3D Affected: 2025 , < 2025.0.1 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2021 , < 2021.1.4 (custom)
    cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_advance_steel Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad_civil_3d Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*
Create a notification for this product.
autodesk autocad Affected: 2021 , < 2021.1.4 (custom)
Affected: 2022 , < 2022.1.4 (custom)
Affected: 2023 , < 2023.1.5 (custom)
Affected: 2024 , < 2024.1.3 (custom)
Affected: 2025 , < 2025.0.1 (custom)
    cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*
    cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_advance_steel:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_advance_steel:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_advance_steel",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad_civil_3d:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad_civil_3d:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad_civil_3d",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
              "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "autocad",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "2021.1.4",
                "status": "affected",
                "version": "2021",
                "versionType": "custom"
              },
              {
                "lessThan": "2022.1.4",
                "status": "affected",
                "version": "2022",
                "versionType": "custom"
              },
              {
                "lessThan": "2023.1.5",
                "status": "affected",
                "version": "2023",
                "versionType": "custom"
              },
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2024",
                "versionType": "custom"
              },
              {
                "lessThan": "2025.0.1",
                "status": "affected",
                "version": "2025",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23124",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-02-22T14:40:30.040434Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:17:33.199Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:30.697Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_architecture:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_architecture:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Architecture",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_electrical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_electrical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Electrical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mechanical:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechnaical:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mechanical:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Mechanical",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_mep:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_mep:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MEP",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_plant_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_plant_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD Plant 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:civil_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:civil_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Civil 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:advance_steel:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:advance_steel:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "Advance Steel",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:autodesk:autocad_map_3d:2025:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2024:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2023:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2022:*:*:*:*:*:*:*",
            "cpe:2.3:a:autodesk:autocad_map_3d:2021:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "AutoCAD MAP 3D",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "2025.0.1",
              "status": "affected",
              "version": "2025",
              "versionType": "custom"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2024",
              "versionType": "custom"
            },
            {
              "lessThan": "2023.1.5",
              "status": "affected",
              "version": "2023",
              "versionType": "custom"
            },
            {
              "lessThan": "2022.1.4",
              "status": "affected",
              "version": "2022",
              "versionType": "custom"
            },
            {
              "lessThan": "2021.1.4",
              "status": "affected",
              "version": "2021",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-26T17:22:08.824Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002"
        },
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23124",
    "datePublished": "2024-02-22T02:14:25.627Z",
    "dateReserved": "2024-01-11T21:46:45.746Z",
    "dateUpdated": "2025-08-26T20:17:33.199Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-23139 (GCVE-0-2024-23139)

Vulnerability from cvelistv5 – Published: 2024-03-17 23:58 – Updated: 2025-08-26 20:40
VLAI
Title
ActionScript Byte Code “ABC” Vulnerability in the Autodesk FBX Review software
Summary
A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
Assigner
Impacted products
Vendor Product Version
Autodesk FBX Review Affected: 1.5.3.0 , < 1.5.4.0 (custom)
    cpe:2.3:a:autodesk:fbx_review:1.5.3.0:*:*:*:*:*:*:*
Create a notification for this product.
autodesk fbx_review Affected: 0 , < 1.5.3.0 (custom)
    cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T22:59:30.714Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0005"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "fbx_review",
            "vendor": "autodesk",
            "versions": [
              {
                "lessThan": "1.5.3.0",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-23139",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-20T15:16:04.054270Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-26T20:40:21.566Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:autodesk:fbx_review:1.5.3.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FBX Review",
          "vendor": "Autodesk",
          "versions": [
            {
              "lessThan": "1.5.4.0",
              "status": "affected",
              "version": "1.5.3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eA maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.\u003c/span\u003e\u003cbr\u003e"
            }
          ],
          "value": "A maliciously crafted ABC file, when parsed through Autodesk FBX, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-100",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-100 Overflow Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-08-26T17:28:31.862Z",
        "orgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
        "shortName": "autodesk"
      },
      "references": [
        {
          "url": "https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0005"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "ActionScript Byte Code \u201cABC\u201d Vulnerability in the Autodesk FBX Review software",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7e40ea87-bc65-4944-9723-dd79dd760601",
    "assignerShortName": "autodesk",
    "cveId": "CVE-2024-23139",
    "datePublished": "2024-03-17T23:58:50.884Z",
    "dateReserved": "2024-01-11T21:47:40.857Z",
    "dateUpdated": "2025-08-26T20:40:21.566Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Mitigation ID: MIT-3

Phase: Requirements

Strategy: Language Selection

Description:

  • Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
  • For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow protection, but the protection can be disabled by the programmer.
  • Be wary that a language's interface to native code may still be subject to overflows, even if the language itself is theoretically safe.
Mitigation ID: MIT-4.1

Phase: Architecture and Design

Strategy: Libraries or Frameworks

Description:

  • Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
  • Examples include the Safe C String Library (SafeStr) by Messier and Viega [REF-57], and the Strsafe.h library from Microsoft [REF-56]. These libraries provide safer versions of overflow-prone string-handling functions.
Mitigation ID: MIT-10

Phases: Operation, Build and Compilation

Strategy: Environment Hardening

Description:

  • Use automatic buffer overflow detection mechanisms that are offered by certain compilers or compiler extensions. Examples include: the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice, which provide various mechanisms including canary-based detection and range/index checking.
  • D3-SFCV (Stack Frame Canary Validation) from D3FEND [REF-1334] discusses canary-based detection in detail.
Mitigation ID: MIT-9

Phase: Implementation

Description:

  • Consider adhering to the following rules when allocating and managing an application's memory:
  • Double check that the buffer is as large as specified.
  • When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string.
  • Check buffer boundaries if accessing the buffer in a loop and make sure there is no danger of writing past the allocated space.
  • If necessary, truncate all input strings to a reasonable length before passing them to the copy and concatenation functions.
Mitigation ID: MIT-11

Phases: Operation, Build and Compilation

Strategy: Environment Hardening

Description:

  • Run or compile the software using features or extensions that randomly arrange the positions of a program's executable and libraries in memory. Because this makes the addresses unpredictable, it can prevent an attacker from reliably jumping to exploitable code.
  • Examples include Address Space Layout Randomization (ASLR) [REF-58] [REF-60] and Position-Independent Executables (PIE) [REF-64]. Imported modules may be similarly realigned if their default memory addresses conflict with other modules, in a process known as "rebasing" (for Windows) and "prelinking" (for Linux) [REF-1332] using randomly generated addresses. ASLR for libraries cannot be used in conjunction with prelink since it would require relocating the libraries at run-time, defeating the whole purpose of prelinking.
  • For more information on these techniques see D3-SAOR (Segment Address Offset Randomization) from D3FEND [REF-1335].
Mitigation ID: MIT-12

Phase: Operation

Strategy: Environment Hardening

Description:

  • Use a CPU and operating system that offers Data Execution Protection (using hardware NX or XD bits) or the equivalent techniques that simulate this feature in software, such as PaX [REF-60] [REF-61]. These techniques ensure that any instruction executed is exclusively at a memory address that is part of the code segment.
  • For more information on these techniques see D3-PSEP (Process Segment Execution Prevention) from D3FEND [REF-1336].
Mitigation ID: MIT-13

Phase: Implementation

Description:

  • Replace unbounded copy functions with analogous functions that support length arguments, such as strcpy with strncpy. Create these if they are not available.

No CAPEC attack patterns related to this CWE.

Back to CWE stats page