CVE-2024-37007

A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Score

CVSS 3.1 7.8 High

Status

Analyzed - psirt@autodesk.com

Published

2024-06-25

Last modified

2025-08-27

Weaknesses

CWE-416

Affected products

• Advance Steel (Autodesk)
• Autocad (Autodesk)
• Autocad Architecture (Autodesk)
• Autocad Electrical (Autodesk)
• Autocad Map 3d (Autodesk)
• Autocad Mechanical (Autodesk)
• Autocad Mechnaical (Autodesk)
• Autocad Mep (Autodesk)
• Autocad Plant 3d (Autodesk)
• Civil 3d (Autodesk)

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0010