CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

EUVD-2023-28987

Malicious code in bioql PyPI...

Autodesk PSKernel Out-of-bounds Read/Write (InfraWorks) (adsk-sa-2023-0009)

The version of Autodesk InfraWorks installed on the remote Windows host is version 2021.x prior to 2021.2, 2022.x prior to 2022.1 or 2023.x prior to 2023.0. It is, therefore, affected by multiple vulnerabilities. - A maliciously crafted pskernel.dll file in Autodesk products is used to trigger...

CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

Design/Logic Flaw

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

PT-2023-19859 · Autodesk · Autodesk Infraworks

Name of the Vulnerable Software and Affected Versions: Autodesk InfraWorks versions 2021 through 2023 Description: A maliciously crafted DLL file can be forced to read beyond allocated boundaries when parsing the DLL files, potentially leading to a resource injection issue. Recommendations: For...

CVE-2023-25005

CVE-2023-25005 affects Autodesk InfraWorks 2021–2023. A malicious DLL can cause reads beyond allocated boundaries when parsing DLLs, leading to a resource injection issue. Some sources describe use-after-free pathways that may enable code execution. Remediation is provided by Autodesk via securit...

Autodesk InfraWorks Installed

Binary data autodeskinfraworkswininstalled.nbin...

Autodesk Infraworks RCE (ADSK-SA-2023-0006)

Applications and services utilizing Autodesk InfraWorks have been affected by a use-after-free vulnerability. The exploitation of these vulnerabilities may lead to code execution. Hotfixes are available in the Autodesk Access or the Accounts Portal to help resolve these vulnerabilities. Note that...