7.8
Élevée
CVE-2025-1659 A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
Description
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Navisworks Freedom 2025 | 2025 → < 2025.5 | 2025.5 |
| Navisworks Simulate 2025 | 2025 → < 2025.5 | 2025.5 |
| Navisworks Manage 2025 | 2025 → < 2025.5 | 2025.5 |
Autres CVE de Navisworks Freedom
Les 23 CVE de Navisworks Freedom →
CVE-2025-1660
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability
7.8
Élevée
CVE-2025-1658
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability
7.8
Élevée
CVE-2024-12671
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability
7.8
Élevée
CVE-2024-12670
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow…
7.8
Élevée