A maliciously crafted STP file in atf_dwg_consumer.dll when parsed through Autodesk applications can lead to a memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
2024-02-22T04:15:08.857
2025-04-11T15:56:16.183
Analyzed
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | autodesk | autocad | < 2021.1.4 | Yes |
| Application | autodesk | autocad | < 2022.1.4 | Yes |
| Application | autodesk | autocad | < 2023.1.5 | Yes |
| Application | autodesk | autocad | < 2024.1.3 | Yes |
| Application | autodesk | autocad | < 2025.0.1 | Yes |
| Application | autodesk | autocad_architecture | < 2021.1.4 | Yes |
| Application | autodesk | autocad_architecture | < 2022.1.4 | Yes |
| Application | autodesk | autocad_architecture | < 2023.1.5 | Yes |
| Application | autodesk | autocad_architecture | < 2024.1.3 | Yes |
| Application | autodesk | autocad_architecture | < 2025.0.1 | Yes |
| Application | autodesk | autocad_electrical | < 2021.1.4 | Yes |
| Application | autodesk | autocad_electrical | < 2022.1.4 | Yes |
| Application | autodesk | autocad_electrical | < 2023.1.5 | Yes |
| Application | autodesk | autocad_electrical | < 2024.1.3 | Yes |
| Application | autodesk | autocad_electrical | < 2025.0.1 | Yes |
| Application | autodesk | autocad_mechanical | < 2021.1.4 | Yes |
| Application | autodesk | autocad_mechanical | < 2022.1.4 | Yes |
| Application | autodesk | autocad_mechanical | < 2023.1.5 | Yes |
| Application | autodesk | autocad_mechanical | < 2024.1.3 | Yes |
| Application | autodesk | autocad_mechanical | < 2025.0.1 | Yes |
| Application | autodesk | autocad_mep | < 2021.1.4 | Yes |
| Application | autodesk | autocad_mep | < 2022.1.4 | Yes |
| Application | autodesk | autocad_mep | < 2023.1.5 | Yes |
| Application | autodesk | autocad_mep | < 2024.1.3 | Yes |
| Application | autodesk | autocad_mep | < 2025.0.1 | Yes |
| Application | autodesk | autocad_plant_3d | < 2021.1.4 | Yes |
| Application | autodesk | autocad_plant_3d | < 2022.1.4 | Yes |
| Application | autodesk | autocad_plant_3d | < 2023.1.5 | Yes |
| Application | autodesk | autocad_plant_3d | < 2024.1.3 | Yes |
| Application | autodesk | autocad_plant_3d | < 2025.0.1 | Yes |
| Application | autodesk | civil_3d | < 2021.1.4 | Yes |
| Application | autodesk | civil_3d | < 2022.1.4 | Yes |
| Application | autodesk | civil_3d | < 2023.1.5 | Yes |
| Application | autodesk | civil_3d | < 2024.1.3 | Yes |
| Application | autodesk | civil_3d | < 2025.0.1 | Yes |
| Application | autodesk | advance_steel | < 2021.1.4 | Yes |
| Application | autodesk | advance_steel | < 2022.1.4 | Yes |
| Application | autodesk | advance_steel | < 2023.1.5 | Yes |
| Application | autodesk | advance_steel | < 2024.1.3 | Yes |
| Application | autodesk | advance_steel | < 2025.0.1 | Yes |
| Application | autodesk | autocad_map_3d | < 2021.1.4 | Yes |
| Application | autodesk | autocad_map_3d | < 2022.1.4 | Yes |
| Application | autodesk | autocad_map_3d | < 2023.1.5 | Yes |
| Application | autodesk | autocad_map_3d | < 2024.1.3 | Yes |
| Application | autodesk | autocad_map_3d | < 2025.0.1 | Yes |