CVE-2024-23136: Autodesk Advance Steel

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

Affected products

• Autodesk Advance Steel: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Architecture: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Electrical: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Map 3d: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Mechanical: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Mep: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Autocad Plant 3d: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)
• Autodesk Civil 3d: from 2021, before 2021.1.4 (fixed in 2021.1.4); from 2022, before 2022.1.4 (fixed in 2022.1.4); from 2023, before 2023.1.5 (fixed in 2023.1.5); from 2024, before 2024.1.3 (fixed in 2024.1.3); from 2025, before 2025.0.1 (fixed in 2025.0.1)

Published 2024-02-22. Last modified 2026-06-17.