7.8
CVE-2024-37000
- EPSS 0.15%
- Veröffentlicht 25.06.2024 03:15:10
- Zuletzt bearbeitet 13.11.2025 21:12:08
- Quelle psirt@autodesk.com
- CVE-Watchlists
- Unerledigt
A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
LoginDaten sind bereitgestellt durch National Vulnerability Database (NVD)
Autodesk ≫ Autocad Architecture Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Architecture Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Architecture Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Architecture Version >= 2025 < 2025.1
Autodesk ≫ Autocad Electrical Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Electrical Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Electrical Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Electrical Version >= 2025 < 2025.1
Autodesk ≫ Autocad Map 3d Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Map 3d Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Map 3d Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Map 3d Version >= 2025 < 2025.1
Autodesk ≫ Autocad Mechanical Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Mechanical Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Mechanical Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Mechanical Version >= 2025 < 2025.1
Autodesk ≫ Autocad Mep Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Mep Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Mep Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Mep Version >= 2025 < 2025.1
Autodesk ≫ Autocad Plant 3d Version >= 2022 < 2022.1.5
Autodesk ≫ Autocad Plant 3d Version >= 2023 < 2023.1.6
Autodesk ≫ Autocad Plant 3d Version >= 2024 < 2024.1.4
Autodesk ≫ Autocad Plant 3d Version >= 2025 < 2025.1
Autodesk ≫ Advance Steel Version >= 2022 < 2022.1.5
Autodesk ≫ Advance Steel Version >= 2023 < 2023.1.6
Autodesk ≫ Advance Steel Version >= 2024 < 2024.1.4
Autodesk ≫ Advance Steel Version >= 2025 < 2025.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.15% | 0.365 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@autodesk.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-787 Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.