Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read se...

CVE-2024-37005 · published 2 years ago
Summary

A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
autodesk advance_steel >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:advance_steel:*:*:*:*:*:*:*:*
autodesk civil_3d >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:civil_3d:*:*:*:*:*:*:*:*
autodesk autocad_plant_3d >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_plant_3d:*:*:*:*:*:*:*:*
autodesk autocad_mep >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_mep:*:*:*:*:*:*:*:*
autodesk autocad_mechanical >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_mechanical:*:*:*:*:*:*:*:*
autodesk autocad_map_3d >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_map_3d:*:*:*:*:*:*:*:*
autodesk autocad_electrical >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_electrical:*:*:*:*:*:*:*:*
autodesk autocad_architecture >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad_architecture:*:*:*:*:*:*:*:*
autodesk autocad >= 2022, < 2022.1.5
>= 2023, < 2023.1.6
>= 2024, < 2024.1.5
>= 2025, < 2025.1
cpe:2.3:a:autodesk:autocad:*:*:*:*:*:*:*:*
Original advisory text
A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read se...
A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leverage this vulnerability to cause a crash,read sensitive data, or execute arbitrary code in the context of the current process.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published25 Jun 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-37005 · NVD
Track software like this
Free during beta