Metrics
Affected Vendors & Products
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-48877 | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. |
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 27 Aug 2025 03:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:*:*:* |
Thu, 30 Jan 2025 02:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 30 Jan 2025 01:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Heap-based Buffer Overflow Vulnerability in Autodesk Desktop Software | DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software |
| References |
|
Wed, 04 Dec 2024 02:15:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
Tue, 08 Oct 2024 04:00:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-787 | |
| CPEs | cpe:2.3:a:autodesk:navisworks:2025.1:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2025.2:*:*:*:*:*:*:* |
Tue, 01 Oct 2024 06:30:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk
Autodesk navisworks |
|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:* | |
| Vendors & Products |
Autodesk
Autodesk navisworks |
|
| Metrics |
ssvc
|
Tue, 01 Oct 2024 05:45:00 +0900
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. | |
| Title | Heap-based Buffer Overflow Vulnerability in Autodesk Desktop Software | |
| Weaknesses | CWE-122 | |
| References |
| |
| Metrics |
cvssV3_1
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: autodesk
Published:
Updated: 2025-08-26T18:16:57.314Z
Reserved: 2024-08-10T16:13:29.464Z
Link: CVE-2024-7673
Vulnrichment
Updated: 2024-09-30T21:05:14.576Z
NVD
Status : Modified
Published: 2024-09-30T21:15:04.250
Modified: 2025-01-29T17:15:29.210
Link: CVE-2024-7673
Redhat
No data.
OpenCVE Enrichment
No data.