GHSA-7cv4-mxxr-4vxg
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
A maliciously crafted DWFX file, when parsed in dwfcore.dll through Autodesk Navisworks, can force an Out-of-Bounds Write. A malicious actor can leverage this vulnerability to cause a crash, write sensitive data, or execute arbitrary code in the context of the current process.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: September 12, 2025 6:34 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.