CVE Vulnerabilities

CVE-2024-23137

Use of Uninitialized Variable

Published: Feb 22, 2024 | Modified: Mar 18, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A maliciously crafted STP or SLDPRT file in ODXSW_DLL.dll when parsed through Autodesk AutoCAD can be used to uninitialized variable. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Weakness

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Potential Mitigations

References