7.8
High
CVE-2024-7675 A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free
Description
A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Navisworks Freedom | 2025 | No fix stated |
| Navisworks Freedom | 2024 | No fix stated |
| Navisworks Freedom | 2023 | No fix stated |
| Navisworks Freedom | 2022 | No fix stated |
| Navisworks Simulate | 2025 | No fix stated |
| Navisworks Simulate | 2024 | No fix stated |
| Navisworks Simulate | 2023 | No fix stated |
| Navisworks Simulate | 2022 | No fix stated |
| Navisworks Manage | 2025 | No fix stated |
Show the 15 other branches Hide the 15 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Navisworks Manage | 2024 | No fix stated |
| Navisworks Manage | 2023 | No fix stated |
| Navisworks Manage | 2022 | No fix stated |
| navisworks_freedom | 2025 | No fix stated |
| navisworks_freedom | 2024 | No fix stated |
| navisworks_freedom | 2023 | No fix stated |
| navisworks_freedom | 2022 | No fix stated |
| navisworks_simulate | 2025 | No fix stated |
| navisworks_simulate | 2024 | No fix stated |
| navisworks_simulate | 2023 | No fix stated |
| navisworks_simulate | 2022 | No fix stated |
| navisworks_manage | 2025 | No fix stated |
| navisworks_manage | 2024 | No fix stated |
| navisworks_manage | 2023 | No fix stated |
| navisworks_manage | 2022 | No fix stated |
References
- www.autodesk.com www.autodesk.com
Timeline
- Published
- Last modified
Other CVEs of Navisworks Freedom
The 23 CVEs of Navisworks Freedom →
CVE-2025-1660
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability
7.8
High
CVE-2025-1659
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2025-1658
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
7.8
High
CVE-2024-12671
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability
7.8
High