TI-2022-10533 Aliases CVE-2022-27527 GHSA-gq53-gwrx-3g2w

Out-of-bounds write in Navisworks

LOW 35CWE-787Published 2022-04-19 · Updated 2024-08-03

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.

Why it matters now

EPSS 0.00506 43rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Navisworks	2022, 2020	—	No fix listed	CNA

Navisworks Vendor— Affected 2022, 2020 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:autodesk:navisworks::::::::	2019 to before 2019.6; 2020 to before 2020.4; 2021 to before 2021.3; 2022 to before 2022.2	Vulnerable	Autodesk

cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:* Versions 2019 to before 2019.6; 2020 to before 2020.4; 2021 to before 2021.3; 2022 to before 2022.2 Vulnerable ·Autodesk

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2022-27527
2026-10-03 Alias added: GHSA-gq53-gwrx-3g2w

References

Advisory 1

https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0010

TI-2022-09364 Out-of-bounds write in Autodesk Advanced Steel, Civil 3D, AutoCAD, AutoCAD LT, AutoCAD… CVSS 3.1HIGH 7.8
TI-2022-09362 Out-of-bounds write in Autodesk Navisworks, Advanced Steel, Civil 3D, AutoCAD, AutoCAD… CVSS 3.1HIGH 7.8
TI-2021-17343 Out-of-bounds write in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD®… CVSS 3.1HIGH 7.8
TI-2021-17342 Out-of-bounds read in Revit, Navisworks, Autodesk® Advance Steel, AutoCAD®, AutoCAD®… CVSS 3.1HIGH 7.8
TI-2024-11756 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software CVSS 3.1HIGH 7.8
TI-2024-11755 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software CVSS 3.1HIGH 7.8

See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences