Vulnerabilities > CVE-2022-27527 - Out-of-bounds Write vulnerability in Autodesk Navisworks

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
autodesk
CWE-787
NVD
Published: 2022-04-19
Updated: 2022-10-29

Summary

A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0.7 version in Autodesk Navisworks 2022, and 2020.

Vulnerable Configurations

Part Description Count
Application
Autodesk
12

Common Weakness Enumeration (CWE)

References