Home
HIGH: 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HDefault status
unaffected
2025 (custom) before 2025.4
affected
Default status
unaffected
2025 (custom) before 2025.4
affected
Default status
unaffected
2025 (custom) before 2025.4
affected
Description
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Problem types
Product status
2025 (custom) before 2025.4
2025 (custom) before 2025.4
2025 (custom) before 2025.4
References
www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027