VULNERABILITY INTELLIGENCE

CVE-2024-37002

CVSS score7.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2024-06-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Weakness classification

  • psirt@autodesk.com: CWE-457
  • nvd@nist.gov: CWE-908

Primary references