A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-48854 | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 27 Aug 2025 03:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. |
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:*:*:* |
Tue, 11 Feb 2025 05:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process. |
Thu, 30 Jan 2025 02:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 30 Jan 2025 01:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Out-of-Bounds Write Vulnerability in Autodesk Desktop Software | DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software |
| References |
|
Wed, 04 Dec 2024 02:15:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
Tue, 08 Oct 2024 04:00:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025.1:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2025.2:*:*:*:*:*:*:* |
Tue, 01 Oct 2024 06:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk
Autodesk navisworks |
|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:* | |
| Vendors & Products |
Autodesk
Autodesk navisworks |
|
| Metrics |
ssvc
|
Tue, 01 Oct 2024 05:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process. | |
| Title | Out-of-Bounds Write Vulnerability in Autodesk Desktop Software | |
| Weaknesses | CWE-787 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: autodesk
Published:
Updated: 2025-08-26T18:16:16.268Z
Reserved: 2024-08-10T16:13:28.211Z
Link: CVE-2024-7672
Vulnrichment
Updated: 2024-09-30T21:05:15.876Z
NVD
Status : Modified
Published: 2024-09-30T21:15:04.070
Modified: 2025-08-26T19:15:33.330
Link: CVE-2024-7672
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses