NetSight
high7.8

CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to…

Impact

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.

Affected products

VendorProductAffected versions
AutodeskInfraworks
from 2021.0 before 2021.2
from 2023.0 before 2023.1
Versions 2021.2, 2023.1

Weakness classification

References