PT-2025-14101 · Autodesk · Autodesk Navisworks Freedom

Published 2025-04-01 · Updated 2025-08-19 · CVE-2025-1659

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Autodesk Navisworks Freedom 2025

Description A maliciously crafted DWFX file can cause an Out-of-Bounds Read issue when parsed through the software. This can be leveraged by a malicious actor to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Recommendations For Autodesk Navisworks Freedom 2025, avoid parsing untrusted DWFX files until a patch is available. As a temporary workaround, consider restricting the use of DWFX file parsing functionality to minimize the risk of exploitation.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-08209

CVE-2025-1659

ZDI-25-198

Affected Products

Autodesk Navisworks Freedom

References · 11

• https://osv.dev/vulnerability/CVE-2025-1659 · Vendor Advisory
• https://autodesk.com/trust/security-advisories/adsk-sa-2025-0002 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08209 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1659 · Security Note
• https://autodesk.com/products/autodesk-access/overview · Patch
• https://zerodayinitiative.com/advisories/ZDI-25-198 · Security Note
• https://t.me/cvenotify/117188 · Telegram Post
• https://t.me/cveNotify/132793 · Telegram Post
• https://twitter.com/CVEnew/status/1908663702431347080 · Twitter Post
• https://twitter.com/WolfgangSesin/status/1907124499172175923 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1907136625148109111 · Twitter Post