Skip to content
OpenAdvisories
Unscored CVE-2022-27872 EUVD-2022-32360GHSA-vqp7-jhj6-766w

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Naviswo…

Published Jun 21, 2022 · Updated Aug 3, 2024 · Assigned by autodesk

Description

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.

Affected products

VendorProductAffectedFixed
— Navisworks 2022 —

References