Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

47 records

Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-120
Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-125
Priority LOW 35

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Read vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00219 Published 2025-04-01 Fixed in 2025.5 CWE-125
TI-2023-13518 CVE-2023-29068 · GHSA-fw27-7fvf-jgxv

Out-of-bounds write in Autodesk products

Priority LOW 36

A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-787
TI-2023-10477 CVE-2023-25004 · GHSA-2w8c-hj6v-28vw

Integer overflow in Autodesk products

Priority LOW 36

A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2023-06-27 No fix listed CWE-190
Load more