Show filters
363 Total Results
Displaying 61-70 of 363
Sort by:
Attacker Value
Unknown

CVE-2024-23135

Disclosure Date: February 22, 2024 (last updated January 27, 2025)
A maliciously crafted SLDPRT file in ASMkern228A.dll when parsed through Autodesk applications can be used in user-after-free vulnerability. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
0
Attacker Value
Unknown

CVE-2024-23133

Disclosure Date: February 22, 2024 (last updated January 27, 2025)
A maliciously crafted STP file in ASMDATAX228A.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23132

Disclosure Date: February 22, 2024 (last updated January 27, 2025)
A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23131

Disclosure Date: February 22, 2024 (last updated January 28, 2025)
A maliciously crafted STP file, when parsed in ASMIMPORT229A.dll, ASMKERN228A.dll, ASMkern229A.dll or ASMDATAX228A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23130

Disclosure Date: February 22, 2024 (last updated January 28, 2025)
A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23129

Disclosure Date: February 22, 2024 (last updated June 25, 2024)
A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23128

Disclosure Date: February 22, 2024 (last updated June 25, 2024)
A maliciously crafted MODEL file, when parsed in libodxdll.dll and ASMDATAX229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23127

Disclosure Date: February 22, 2024 (last updated June 25, 2024)
A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cause a Heap-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23126

Disclosure Date: February 22, 2024 (last updated January 27, 2025)
A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
0
Attacker Value
Unknown

CVE-2024-23125

Disclosure Date: February 22, 2024 (last updated January 27, 2025)
A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
0