Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Autodesk | Navisworks Freedom | unaffected |
|
|||||||||||||||
| Autodesk | Navisworks Simulate | unaffected |
|
|||||||||||||||
| Autodesk | Navisworks Manage | unaffected |
|
Configuration 1 [-]
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-48555 | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. |
Tue, 26 Aug 2025 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. | A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. |
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2022:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2023:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2024:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:*:*:* |
Wed, 29 Jan 2025 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 29 Jan 2025 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Heap-based Buffer Overflow Vulnerability in Autodesk Desktop Software | DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software |
| References |
|
Tue, 03 Dec 2024 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
|
| CPEs | cpe:2.3:a:autodesk:navisworks_freedom:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_manage:*:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks_simulate:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Autodesk navisworks Freedom
Autodesk navisworks Manage Autodesk navisworks Simulate |
Mon, 07 Oct 2024 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-787 | |
| CPEs | cpe:2.3:a:autodesk:navisworks:2025.1:*:*:*:*:*:*:* cpe:2.3:a:autodesk:navisworks:2025.2:*:*:*:*:*:*:* |
Mon, 30 Sep 2024 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Autodesk
Autodesk navisworks |
|
| CPEs | cpe:2.3:a:autodesk:navisworks:2025:*:*:*:*:*:*:* | |
| Vendors & Products |
Autodesk
Autodesk navisworks |
|
| Metrics |
ssvc
|
Mon, 30 Sep 2024 20:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A maliciously crafted DWF file, when parsed in dwfcore.dll through Autodesk Navisworks, can force a Heap-based Buffer Overflow. A malicious actor can leverage this vulnerability to cause a crash or execute arbitrary code in the context of the current process. | |
| Title | Heap-based Buffer Overflow Vulnerability in Autodesk Desktop Software | |
| Weaknesses | CWE-122 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: autodesk
Published:
Updated: 2025-08-26T18:17:27.701Z
Reserved: 2024-08-10T16:13:30.551Z
Link: CVE-2024-7674
Vulnrichment
Updated: 2024-09-30T21:05:12.955Z
NVD
Status : Modified
Published: 2024-09-30T21:15:04.430
Modified: 2025-08-26T19:15:33.620
Link: CVE-2024-7674
Redhat
No data.
OpenCVE Enrichment
No data.