CVE-2025-1659
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Apr 1, 2025
CWE ID 125
Summary
CVE-2025-1659 is a vulnerability affecting Autodesk Navisworks that can be exploited through a maliciously crafted DWFX file. This issue results in an Out-of-Bounds Read condition, allowing an attacker to cause a crash or gain unauthorized access to sensitive data. In extreme cases, arbitrary code execution in the context of the current process is also possible. Users are advised to update to the latest version of Autodesk Navisworks to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Autodesk Navisworks Simulate
- Navisworks Freedom
- Navisworks Manage
Affected Vendors
- Autodesk