# CVE-2024-23136

## Summary

- **CVE ID:** CVE-2024-23136
- **Severity:** HIGH
- **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
- **CWE:** CWE-822
- **Published:** Feb 22, 2024
- **Last Modified:** Mar 13, 2026

## Description

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

## Affected Products

- Autodesk — AutoCAD (2025)
- Autodesk — AutoCAD (2024)
- Autodesk — AutoCAD (2023)
- Autodesk — AutoCAD (2022)
- Autodesk — AutoCAD (2021)
- Autodesk — AutoCAD Architecture (2025)
- Autodesk — AutoCAD Architecture (2024)
- Autodesk — AutoCAD Architecture (2023)
- Autodesk — AutoCAD Architecture (2022)
- Autodesk — AutoCAD Architecture (2021)
- Autodesk — AutoCAD Electrical (2025)
- Autodesk — AutoCAD Electrical (2024)
- Autodesk — AutoCAD Electrical (2023)
- Autodesk — AutoCAD Electrical (2022)
- Autodesk — AutoCAD Electrical (2021)
- Autodesk — AutoCAD Mechanical (2025)
- Autodesk — AutoCAD Mechanical (2024)
- Autodesk — AutoCAD Mechanical (2023)
- Autodesk — AutoCAD Mechanical (2022)
- Autodesk — AutoCAD Mechanical (2021)
- Autodesk — AutoCAD MEP (2025)
- Autodesk — AutoCAD MEP (2024)
- Autodesk — AutoCAD MEP (2023)
- Autodesk — AutoCAD MEP (2022)
- Autodesk — AutoCAD MEP (2021)
- Autodesk — AutoCAD Plant 3D (2025)
- Autodesk — AutoCAD Plant 3D (2024)
- Autodesk — AutoCAD Plant 3D (2023)
- Autodesk — AutoCAD Plant 3D (2022)
- Autodesk — AutoCAD Plant 3D (2021)
- Autodesk — Civil 3D (2025)
- Autodesk — Civil 3D (2024)
- Autodesk — Civil 3D (2023)
- Autodesk — Civil 3D (2022)
- Autodesk — Civil 3D (2021)
- Autodesk — Advance Steel (2025)
- Autodesk — Advance Steel (2024)
- Autodesk — Advance Steel (2023)
- Autodesk — Advance Steel (2022)
- Autodesk — Advance Steel (2021)
- Autodesk — AutoCAD MAP 3D (2025)
- Autodesk — AutoCAD MAP 3D (2024)
- Autodesk — AutoCAD MAP 3D (2023)
- Autodesk — AutoCAD MAP 3D (2022)
- Autodesk — AutoCAD MAP 3D (2021)

## References

- [CNA](https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002)
- [CNA](https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.44%
- **EPSS Percentile:** 36.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._