Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-37002

June 25, 2024, 12:24 p.m.

Product(s) Impacted

Autodesk applications

  • UNKNOWN

Description

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Weaknesses

CWE-457
Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

CWE ID: 457

Date

Published: June 25, 2024, 3:15 a.m.

Last Modified: June 25, 2024, 12:24 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@autodesk.com

References

https://www.autodesk.com/ psirt@autodesk.com