vulnerability

AutoDesk AutoCAD: CVE-2024-37004: Autodesk AutoCAD, Advance Steel and Civil 3D

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
May 31, 2024
Added
Jul 28, 2025
Modified
Jul 28, 2025

Description

A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Solution

autodesk-autocad-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.