Skip to content
OpenAdvisories
High · 7.8 CVE-2024-37002 EUVD-2024-36594GHSA-354c-38ff-3cw6

Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software

Published Jun 25, 2024 · Updated Aug 27, 2025 · Assigned by autodesk

Vendor: Autodesk Product: Advance Steel Product: AutoCAD Product: AutoCAD Architecture Product: AutoCAD Electrical Product: AutoCAD MAP 3D Product: AutoCAD Mechanical Product: AutoCAD MEP Product: AutoCAD Plant 3D Product: Civil 3D

Description

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected products

VendorProductAffectedFixed
Autodesk AutoCAD 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD Architecture 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD Electrical 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD Mechanical 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD MEP 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD Plant 3D 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk Civil 3D 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk Advance Steel 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1
Autodesk AutoCAD MAP 3D 2025 – < 2025.1, 2024 – < 2024.1.4, 2023 – < 2023.1.6, 2022 – < 2022.1.5 2025.1

Advisories 1

References