Loading HuntDB...

GHSA-q9rx-4p5p-q33x

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

A maliciously crafted STP, CATPART or MODEL file when parsed in ASMKERN228A.dll through Autodesk AutoCAD can force an Out-of-Bound Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. 

Related CVEs

Key Information

GHSA ID
GHSA-q9rx-4p5p-q33x
Published
February 22, 2024 12:31 AM
Last Modified
April 11, 2025 6:30 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: September 14, 2025 6:31 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.