CVE-2024-23129

Description

A maliciously crafted MODEL 3DM, STP, or SLDASM file, when in opennurbs.dll parsed through Autodesk applications, can lead to a memory corruption vulnerability by write access violation. This vulnerability, in conjunction with other vulnerabilities, can lead to code execution in the context of the current process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0002 ↗
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0004 ↗
• https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0009 ↗