CVE-2024-23156: Multiple ZDI Vulnerabilities in Autodesk AutoCAD and certain AutoCAD-based products
A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23156?
CVE-2024-23156 is classified as a critical vulnerability due to its potential to cause memory corruption and enable code execution.
How do I fix CVE-2024-23156?
To fix CVE-2024-23156, ensure that you update your Autodesk software to the latest version where this vulnerability has been addressed.
What products are affected by CVE-2024-23156?
CVE-2024-23156 affects Autodesk AutoCAD and Autodesk AutoCAD-based products.
What type of attack can exploit CVE-2024-23156?
CVE-2024-23156 can be exploited through a maliciously crafted 3DM file that leads to memory corruption when parsed.
Is CVE-2024-23156 remotely exploitable?
CVE-2024-23156 is not remotely exploitable as it requires user interaction to open the malicious 3DM file.