7.8
Élevée
CVE-2024-7674 A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer…
Description
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Navisworks Freedom 2025 | 2025 → < 2025.3 | 2025.3 |
| Navisworks Freedom 2024 | 2024 → < 2024.3 | 2024.3 |
| Navisworks Freedom 2023 | 2023 → < 2023.5 | 2023.5 |
| Navisworks Freedom 2022 | 2022 → < 2022.6 | 2022.6 |
| Navisworks Simulate 2025 | 2025 → < 2025.3 | 2025.3 |
| Navisworks Simulate 2024 | 2024 → < 2024.3 | 2024.3 |
| Navisworks Simulate 2023 | 2023 → < 2023.5 | 2023.5 |
| Navisworks Simulate 2022 | 2022 → < 2022.6 | 2022.6 |
| Navisworks Manage 2025 | 2025 → < 2025.3 | 2025.3 |
Afficher les 15 autres branches Masquer les 15 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Navisworks Manage 2024 | 2024 → < 2024.3 | 2024.3 |
| Navisworks Manage 2023 | 2023 → < 2023.5 | 2023.5 |
| Navisworks Manage 2022 | 2022 → < 2022.6 | 2022.6 |
| navisworks_freedom | 2025 | Pas de correctif indiqué |
| navisworks_freedom | 2024 | Pas de correctif indiqué |
| navisworks_freedom | 2023 | Pas de correctif indiqué |
| navisworks_freedom | 2022 | Pas de correctif indiqué |
| navisworks_simulate | 2025 | Pas de correctif indiqué |
| navisworks_simulate | 2024 | Pas de correctif indiqué |
| navisworks_simulate | 2023 | Pas de correctif indiqué |
| navisworks_simulate | 2022 | Pas de correctif indiqué |
| navisworks_manage | 2025 | Pas de correctif indiqué |
| navisworks_manage | 2024 | Pas de correctif indiqué |
| navisworks_manage | 2023 | Pas de correctif indiqué |
| navisworks_manage | 2022 | Pas de correctif indiqué |
Références
- www.autodesk.com www.autodesk.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Navisworks Freedom
Les 23 CVE de Navisworks Freedom →
CVE-2025-1660
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability
7.8
Élevée
CVE-2025-1659
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
7.8
Élevée
CVE-2025-1658
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
7.8
Élevée
CVE-2024-12671
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability
7.8
Élevée