What is GHSA-7r6c-c52h-pf9p?

GHSA-7r6c-c52h-pf9p is a security advisory published by GitHub Security Advisories with High severity. A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...

Which CVE IDs does GHSA-7r6c-c52h-pf9p cover?

GHSA-7r6c-c52h-pf9p covers the following CVE IDs: CVE-2023-41139. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-7r6c-c52h-pf9p?

GHSA-7r6c-c52h-pf9p has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-7r6c-c52h-pf9pHighCVSS 7.8

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to...

Vendor

GitHub Security Advisories

Published

November 23, 2023

Last Modified

October 9, 2026

🔗 CVE IDs covered (1)

CVE-2023-41139 →

📋 Description

A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2023-41139
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0018
https://github.com/advisories/GHSA-7r6c-c52h-pf9p