Skip to content

A maliciously crafted STP file in ASMKERN228A.dll or...

Unreviewed Published Feb 22, 2024 to the GitHub Advisory Database • Updated Jun 25, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A maliciously crafted STP file in ASMKERN228A.dll or ASMDATAX228A.dll when parsed through Autodesk AutoCAD could lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.

References

Published by the National Vulnerability Database Feb 22, 2024
Published to the GitHub Advisory Database Feb 22, 2024
Last updated Jun 25, 2024

Severity

Unknown

Weaknesses

CVE ID

CVE-2024-23131

GHSA ID

GHSA-23h8-4q9g-xc4f

Source code

No known source code

Dependabot alerts are not supported on this advisory because it does not have a package from a supported ecosystem with an affected and fixed version.

Learn more about GitHub language support

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.