CVE-2024-7675 — DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

CVE-2024-7675

DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software PUBLISHED

Description (CNA)

A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
Autodesk / Navisworks Freedom	affected 2025; affected 2024; affected 2023; affected 2022
Autodesk / Navisworks Simulate	affected 2025; affected 2024; affected 2023; affected 2022
Autodesk / Navisworks Manage	affected 2025; affected 2024; affected 2023; affected 2022

CWE

CWE-416

References

https://www.autodesk.com/trust/security-advisories/adsk-sa-2024-0015

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.