CVE-2021-40163

CVE-2021-40163 is a memory corruption vulnerability in Autodesk Image Processing component that can lead to code execution via a malicious DLL. The NVD entry notes local attack vector, user interaction required, with a base score of 7.8 (HIGH). The issue is repeatedly described across sources as ...

CVE-2022-25792

CVE-2022-25792 is a buffer overflow in DXF file parsing affecting Autodesk AutoCAD (2022, 2021, 2020, 2019) and Autodesk Navisworks 2022. The issue arises from writing beyond an allocated buffer when processing a malicious DXF file, allowing arbitrary code execution. Connected documents corrobora...

CVE-2022-25791

The CVE-2022-25791 entry describes a memory corruption vulnerability in Autodesk products (AutoCAD 2022/2021/2020/2019 and Navisworks 2022) that can lead to code execution via maliciously crafted DWF/DWFX/DWF parsing. Connected sources specify the flaw arises from parsing of DWF/DWFX/DWF files an...

CVE-2022-27527

CVE-2022-27527 affects Autodesk Navisworks (2022 and 2020) via a memory corruption vulnerability in embedded PDFTron code. The root cause is memory corruption triggered by malicious DLLs, enabling code execution with the attacker’s context if PDFTron components are pre–9.0.7. Affected setup: PDFT...

CVE-2022-25790

CVE-2022-25790 describes a vulnerability in Autodesk products (Autodesk AutoCAD 2022/2021/2020/2019 and Autodesk Navisworks 2022) where parsing of DWF files can write beyond allocated boundaries, potentially enabling code execution. Connected sources (ZDI advisories) corroborate an out-of-bounds ...

CVE-2023-25003

CVE-2023-25003 affects Autodesk AutoCAD 2023 and Autodesk Maya 2022 via a malicious pskernel.dll that enables out-of-bounds read/write conditions, potentially leading to code execution. The issue is caused by a vulnerability in the pskernel.dll handling, with exploitation implied by references to...

CVE-2023-29068

CVE-2023-29068 : A maliciously crafted file consumed through the Autodesk pskernel.dll can cause memory corruption, which in conjunction with other vulnerabilities could lead to code execution in the context of the current process. The issue is associated with Autodesk products using pskernel.dll...

CVE-2022-27528

Autodesk Navisworks 2022 is affected by a use-after-free vulnerability in the parsing of DWFX and SKP files, enabling potential code execution. The referenced advisories (ZDI for Navisworks Freedom/Manage, Red Hat and NVD variants) describe the fault as a parsing-time use-after-free in DWFX/SKP h...

CVE-2021-40166

CVE-2021-40166 affects Autodesk Image Processing: parsing of a malicious PNG can trigger a use-after-free by freeing an object that has already been freed, potentially allowing arbitrary code execution. Documented impact is arbitrary code execution; no specific remediation/version fixes are state...

CVE-2021-40161

Summary (CVE-2021-40161) : The issue affects PDFTron software; memory corruption can enable remote code execution when processing PDFs containing malicious DLL references. Root cause is errors in the mechanism that checks the path to dynamically loaded libraries (DLLs). Affected products are PDFT...

CVE-2024-7673

CVE-2024-7673 describes a heap-based buffer overflow in the parser w3dtk.dll when processing a malicious DWFX file in Autodesk Navisworks. The vulnerability can crash the process or allow arbitrary code execution in the context of the current process. Public references corroborate the issue as a ...

CVE-2021-40162

CVE-2021-40162 affects Autodesk Image Processing: a vulnerability where parsing TIFF/PICT/TGA/RLC files may cause reads beyond allocated boundaries, enabling arbitrary code execution. Root cause is in the image-processing component's handling of external image formats. Impact is high (AV Local, U...

CVE-2025-1658

Autodesk Navisworks products (Freedom/Manage/Simulate) are affected when parsing a crafted DWFX file. The vulnerability is an out-of-bounds read in the DWFX parsing path that can crash the process, read sensitive data, or potentially allow arbitrary code execution (per external advisories); the C...

CVE-2023-25001

CVE-2023-25001 affects Autodesk Navisworks 2023 and 2022. The issue is a use-after-free during parsing of SKP files, which may allow code execution. Connected sources describe the flaw but do not provide patch versions or remediation specifics for Navisworks. No explicit exploitation details are ...

CVE-2024-12193

CVE-2024-12193 concerns Autodesk Navisworks family (Navisworks/Freedom/Simulate/Manage) with a DWFX file parsing flaw that can cause an Out-of-Bounds Write. The vulnerability arises during parsing of DWFX data and, depending on the source, may lead to crash, data corruption, or arbitrary code exe...

CVE-2022-25796

The CVE-2022-25796 issue is a Double Free vulnerability in Autodesk Navisworks 2022 related to DWF file handling. It is triggered by processing crafted DWF inputs, leading to remote arbitrary code execution. Exploitation requires user interaction (e.g., opening a malicious file or visiting a mali...

CVE-2021-40155

Autodesk Navisworks is affected by CVE-2021-40155 due to a parsing vulnerability in DWG files that can cause a read past the allocation boundary, effectively a buffer overflow/out-of-bounds read. Multiple sources (NVD entry and third-party advisories) describe that parsing malicious DWG data can ...

CVE-2023-25002

CVE-2023-25002 concerns a use-after-free vulnerability triggered by a malicious SKP file in Autodesk products. Affected software is Autodesk products that process SKP files (e.g., Autodesk 3ds Max, Navisworks, SKP-related components) per multiple sources in the Connected set. Root cause is a use-...

CVE-2024-7672

CVE-2024-7672: In Autodesk Navisworks, parsing a malicious DWF file via dwfcore.dll can trigger an Out-of-Bounds Write, potentially crashing the process, corrupting data, or allowing arbitrary code execution. This is tied to the DWF/DWF-related parsing path; several sources (NVD, Red Hat advisory...

CVE-2021-40164

This CVE affects Autodesk Image Processing. A heap-based buffer overflow can occur while parsing TIFF, PICT, TGA, or RLC files, enabling arbitrary code execution. Root cause: improper handling during image parsing. Impact is high per sources; exploitation is possible when processing malformed ima...

CVE-2021-40160

CVE-2021-40160 affects PDFTron before 9.0.7, where parsing a malicious PDF can read beyond allocated boundaries, enabling arbitrary code execution. The primary public details come from Autodesk/AutoCAD disclosures and ZDI notes: exploitation is possible via crafted PDF data, and some analyses ind...

CVE-2022-27871

CVE-2022-27871 affects Autodesk AutoCAD product suite, Revit, Design Review and Navisworks when using PDFTron prior to 9.1.17. The root cause is a boundary error while parsing PDF files, which can allow writing beyond the allocated buffer. This may enable arbitrary code execution on the affected ...

CVE-2023-25004

CVE-2023-25004 involves a maliciously crafted pskernel.dll in Autodesk products that triggers an integer overflow vulnerability, potentially enabling code execution. Connected advisories document affected Autodesk components such as InfraWorks and VRED variants and describe exploitation possibili...

CVE-2024-12197

CVE-2024-12197 describes an Out-of-Bounds Write in Autodesk Navisworks when parsing a malicious DWFX file. The underlying issue is improper validation during DWFX parsing, allowing a crafted file to cause a crash, data corruption, or arbitrary code execution in the context of the current process....

CVE-2024-7670

The CVE-2024-7670 issue affects Autodesk Navisworks: parsing of DWFX files in the w3dtk.dll component can trigger an Out-of-Bounds Read. This vulnerability can lead to a crash, data exposure, or arbitrary code execution within the process context. Affected products/variants are centered on Navisw...

CVE-2025-1659

CVE-2025-1659 : A maliciously crafted DWFX file, when parsed by Autodesk Navisworks, can trigger an Out-of-Bounds Read. This may crash the process, allow reading of sensitive data, or execution of arbitrary code in the current process. Affected component: Navisworks (DWFX parsing). Root cause: ou...

CVE-2022-27872

Autodesk Navisworks 2022 (and prior) is affected by CVE-2022-27872 due to a flaw in PDF parsing. A crafted PDF can cause a pointer dereference during parsing, leading to an unhandled exception that may crash the application and potentially allow reading sensitive data or arbitrary code execution....

CVE-2024-7675

CVE-2024-7675 affects Autodesk Navisworks (Navisworks Freedom/Manage/Simulate) where parsing a malicious DWF file triggers a Use-After-Free in w3dtk.dll, potentially allowing crash or arbitrary code execution in the current process. Exploitation is described as local with user interaction require...

CVE-2025-1660

CVE-2025-1660 describes a memory corruption vulnerability in Autodesk Navisworks when parsing a crafted DWFX file, allowing arbitrary code execution in the context of the current process. The issue arises from the DWFX parsing path and is exploitable locally, with user interaction required to tri...

CVE-2021-40165

Summary: CVE-2021-40165 affects Autodesk Image Processing components. A crafted TIFF/PICT/TGA/RLC file can cause a write past the allocated buffer during parsing, potentially allowing arbitrary code execution. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector, low attack complexity, ...

CVE-2024-7671

CVE-2024-7671 : Concrete detail found in connected documents. Autodesk Navisworks parses DWFX with dwfcore.dll, and a malicious DWFX file can trigger an Out-of-Bounds Write, enabling crash, data corruption, or arbitrary code execution in the current process. This is associated with Navisworks com...

CVE-2024-7674

CVE-2024-7674 affects Autodesk Navisworks where parsing a DWFX file via dwfcore.dll can trigger a heap-based buffer overflow, enabling a crash or arbitrary code execution in the current process. Affected products are Navisworks components that parse DWFX; exploitation is described as impacting th...

CVE-2024-11422

CVE-2024-11422 affects Autodesk Navisworks family (Navisworks Manage, Simulate, Freedom) via parsing of DWFX files. The issue is an out-of-bounds write in the DWFX parser which can crash, corrupt data, or allow arbitrary code execution in the current process. Exploitation requires user interactio...

CVE-2024-12671

CVE-2024-12671 involves a vulnerability in Autodesk Navisworks where parsing a malicious DWFX file can cause an Out-of-Bounds Write. This may crash the process, corrupt data, or allow arbitrary code execution in the current process context. Public sources (NVD, Red Hat advisory, ZDI) describe the...

CVE-2024-12669

CVE-2024-12669 is a heap-based overflow vulnerability in Autodesk Navisworks when parsing DWFX files. In affected products (Navisworks Freedom/Manage/Simulate), a malicious DWFX file can crash, read sensitive data, or execute arbitrary code in the current process. Exploitation is local with requi...

CVE-2024-12194

CVE-2024-12194 is a memory corruption vulnerability in Autodesk Navisworks triggered by parsing DWFX files, enabling arbitrary code execution in the victim process. Affected products include Navisworks variants (Freedom/Manage/Simulate); root cause is DWFX parsing memory-management fault. The vul...

CVE-2024-12200

CVE-2024-12200 affects Autodesk Navisworks family (Desktop/Manage/Freedom/Simulate) via parsing of DWFX files. The root cause is an Out-of-Bounds Write in the DWFX parser, which can cause a crash, data corruption, or arbitrary code execution in the context of the vulnerable process. Public refere...

CVE-2024-12670

CVE-2024-12670 describes a heap-based overflow in Autodesk Navisworks when parsing DWFX files. The issue allows a malicious DWFX to cause a crash, read sensitive data, or execute arbitrary code in the current process, with local access and user interaction required. Connected sources (NVD/Red Hat...

CVE-2024-12192

CVE-2024-12192 concerns Autodesk Navisworks when parsing a maliciously crafted DWF file, causing an Out-of-Bounds Write. Public sources describe a vulnerability that can crash the process, corrupt data, or allow arbitrary code execution in the context of the affected Navisworks component. The CVE...

CVE-2024-12191

CVE-2024-12191 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing DWFX files. The issue can cause a crash, data corruption, or arbitrary code execution in the process context. Published sources (NVD, Red Hat advisory, ZDI) align on the DWFX parsing root cause and i...

CVE-2021-27046

CVE-2021-27046 affects Autodesk Navisworks 2019–2022, where a memory corruption in PDF parsing may allow code execution via specially crafted DLLs. Multiple sources describe exploitation scenarios: ZDI cites remote code execution with user interaction required (visiting a malicious page or openin...

CVE-2024-12198

CVE-2024-12198 is an out-of-bounds write weakness in Autodesk Navisworks related to DWFX file parsing. The vulnerability affects multiple Navisworks lines (Freedom/Manage/Simulate) and can crash, corrupt data, or allow arbitrary code execution in the current process when a malicious DWFX file is ...

CVE-2021-27045

CVE-2021-27045 affects Autodesk Navisworks (2019–2022). The root cause is an out-of-bounds read during PDF parsing in Navisworks, allowing crafted PDFs to read beyond allocated buffers and potentially execute arbitrary code. Several connected advisories corroborate a PDF parsing flaw that could e...

CVE-2024-12178

CVE-2024-12178 describes a memory corruption vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. The issue can allow arbitrary code execution in the context of the affected process. Reported as a local vulnerability with low attack complexity and requiring user interaction (p...

CVE-2024-12199

CVE-2024-12199 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. Practical impact: crash, data corruption, or arbitrary code execution in the current process. Affected products/versions include Navisworks families prior to 2025.4 (Freedom/Ma...

CVE-2021-40156

CVE-2021-40156 affects Autodesk Navisworks 2019–2022. The issue is a buffer overflow/out-of-bounds write when parsing malicious DWG files, forcing writes beyond allocated boundaries and enabling arbitrary code execution. Some sources describe remote code execution requiring user interaction (e.g....

CVE-2024-12179

CVE-2024-12179 describes a heap-based overflow in Autodesk Navisworks when parsing a malicious DWFX file. The vulnerability affects Navisworks (desktop) and arises from parsing DWFX data, allowing a malicious actor to crash the process, read sensitive data, or execute arbitrary code within the af...