CVE-2024-37002

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@autodesk.com

Published

2024-06-25

Last modified

2025-08-27

Weaknesses

CWE-457, CWE-908

Affected products

• Advance Steel (Autodesk)
• Autocad (Autodesk)
• Autocad Architecture (Autodesk)
• Autocad Electrical (Autodesk)
• Autocad Map 3d (Autodesk)
• Autocad Mechanical (Autodesk)
• Autocad Mechnaical (Autodesk)
• Autocad Mep (Autodesk)
• Autocad Plant 3d (Autodesk)
• Civil 3d (Autodesk)

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009