vulnerability

AutoDesk AutoCAD: CVE-2024-23135: Autodesk AutoCAD, Advance Steel and Civil 3D

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Feb 29, 2024
Added
Jul 22, 2025
Modified
Jul 28, 2025

Description

A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Solution

autodesk-autocad-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.