CVE-2025-1658
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 125
Summary
CVE-2025-1658 is a newly identified vulnerability that affects Autodesk Navisworks software. When processing a maliciously crafted DWFX file, the software encounters an Out-of-Bounds Read issue. This weakness can be exploited by a malicious actor to cause a crash, read confidential data, or execute arbitrary code within the context of the current process. Users are advised to apply relevant patches or updates to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Autodesk Navisworks Simulate
- Navisworks Freedom
- Navisworks Manage
Affected Vendors
- Autodesk