CVE-2024-8597: Autodesk AutoCAD STEP File Parsing Memory Corruption Code Execution Vulnerability
A maliciously crafted STP file when parsed in ASMDATAX230A.dll through Autodesk AutoCAD can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8597?
CVE-2024-8597 is classified as a critical vulnerability due to the potential for memory corruption and remote code execution.
How do I fix CVE-2024-8597?
To fix CVE-2024-8597, apply the latest security patch provided by Autodesk for your affected product version.
Which Autodesk products are affected by CVE-2024-8597?
CVE-2024-8597 affects multiple Autodesk products including AutoCAD versions 2025 and earlier, except for newer 2025.1.1 versions.
What could happen if I am vulnerable to CVE-2024-8597?
If vulnerable to CVE-2024-8597, an attacker could exploit the vulnerability to crash the application, write sensitive data, or execute arbitrary code.
Is there a workaround for CVE-2024-8597?
Currently, the recommended approach for CVE-2024-8597 is to update the software to the latest version as no effective workaround is documented.