Autodesk

Advance Steel

90 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2024-37006

  • EPSS 0.22%
  • Veröffentlicht 25.06.2024 04:15:16
  • Zuletzt bearbeitet 06.11.2025 22:02:19

A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code e...

7.8

CVE-2024-37007

  • EPSS 0.95%
  • Veröffentlicht 25.06.2024 04:15:16
  • Zuletzt bearbeitet 06.05.2025 17:18:01

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

7.8

CVE-2024-37005

  • EPSS 0.57%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 14:46:31

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the contex...

7.8

CVE-2024-37004

  • EPSS 0.21%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 21:12:18

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

7.8

CVE-2024-37003

  • EPSS 0.12%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 20:41:58

A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive d...

7.8

CVE-2024-36999

  • EPSS 0.61%
  • Veröffentlicht 25.06.2024 04:15:15
  • Zuletzt bearbeitet 13.11.2025 20:39:28

A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the c...

7.8

CVE-2024-23159

  • EPSS 0.8%
  • Veröffentlicht 25.06.2024 04:15:14
  • Zuletzt bearbeitet 13.11.2025 20:36:36

A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.

7.8

CVE-2024-23158

  • EPSS 0.72%
  • Veröffentlicht 25.06.2024 04:15:14
  • Zuletzt bearbeitet 13.11.2025 20:32:49

A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the ...

7.8

CVE-2024-23156

  • EPSS 0.61%
  • Veröffentlicht 25.06.2024 04:15:13
  • Zuletzt bearbeitet 06.05.2025 19:43:16

A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, along with other vulnerabilities, can lead to...

7.8

CVE-2024-23154

  • EPSS 0.61%
  • Veröffentlicht 25.06.2024 04:15:13
  • Zuletzt bearbeitet 13.11.2025 20:30:55

A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary c...