A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.
Weakness
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Autocad | Autodesk | 2022 (including) | 2022.1.5 (excluding) |
| Autocad | Autodesk | 2023 (including) | 2023.1.6 (excluding) |
| Autocad | Autodesk | 2024 (including) | 2024.1.4 (excluding) |
| Autocad | Autodesk | 2025 (including) | 2025.1 (excluding) |