Skip to content
Sign in
Not rated

CVE-2022-27872 A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF…

Description

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.

Affected products and versions

Product Affected versions Fixed in
Navisworks 2022 No fix stated

Other CVEs of Navisworks

The 3 CVEs of Navisworks →
CVE-2023-25001 A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability Not rated CVE-2022-27527 A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files Not rated
Track this CVE