Skip to content
OpenAdvisories
High · 7.8 CVE-2023-25005 EUVD-2023-28987GHSA-fvwx-63p4-jv5q

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL…

Published May 12, 2023 · Updated Jan 27, 2025 · Assigned by autodesk

Description

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.

Affected products

VendorProductAffectedFixed
— Autodesk InfraWorks 2023, 2021 —

References