CVE-2022-25791

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD versions 2019 through 2022 Autodesk Navisworks versions 2022

Description A Memory Corruption issue exists in the parsing of DWF and DWFX files, potentially leading to code execution through maliciously crafted DLL files. This issue may be exploited remotely.

Recommendations For Autodesk AutoCAD versions 2019 through 2022, update to a version that includes the fix for this issue. For Autodesk Navisworks version 2022, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the use of DWF and DWFX file parsing functionality in affected Autodesk products until a patch is available.