VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026

CVE-2022-25796

CVE-2022-25796

Description

A Double Free vulnerability allows remote malicious actors to execute arbitrary code on DWF file in Autodesk Navisworks 2022 within affected installations. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

Affected products

3
  • Autodesk/Navisworks3 versions
    cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:autodesk:navisworks:*:*:*:*:*:*:*:*range: >=2022,<2022.2
    • (no CPE)
    • (no CPE)range: 2022

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.