description: A maliciously crafted STP file in ASMIMPORT228A.dll when parsed through
Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can
leverage this vulnerability to cause a crash, write sensitive data, or execute
arbitrary code in the context of the current process.
problem types: CWE-787 Out-of-bounds Write
affected:
{
defaultStatus: unknown
product: AutoCAD, Advance Steel and Civil 3D
vendor: Autodesk
versions:
status: affected, version: 2024, 2023, 2022, 2021
}