CVE-2024-23136: Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23136?
CVE-2024-23136 has been rated as a critical vulnerability due to its potential to lead to code execution.
How do I fix CVE-2024-23136?
To fix CVE-2024-23136, ensure that you update your Autodesk AutoCAD application to the latest version provided by Autodesk.
Who is affected by CVE-2024-23136?
CVE-2024-23136 affects users of Autodesk AutoCAD 2024 who open maliciously crafted STP files.
What actions can attackers take with CVE-2024-23136?
Attackers can exploit CVE-2024-23136 to dereference an untrusted pointer, potentially enabling code execution in the context of the application.
Is CVE-2024-23136 being actively exploited?
As of the latest updates, there are indications that CVE-2024-23136 could be actively exploited, making immediate mitigation crucial.