CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2024-23159
High (7.8) in autodesk. EPSS 0.3% chance of exploitation in the next 30 days.
A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-908, CWE-457
- Published
- Modified
- Record from
- the NVD, synced
Affected
- autodesk:advance_steel
- autodesk:autocad
- autodesk:autocad_architecture
- autodesk:autocad_electrical
- autodesk:autocad_map_3d
- autodesk:autocad_mechanical
- autodesk:autocad_mep
- autodesk:autocad_plant_3d
- autodesk:civil_3d