Use-After-Free Vulnerability in Autodesk Navisworks 2022 and 2023

CVE-2023-25001

What is CVE-2023-25001?

A vulnerability exists in Autodesk Navisworks 2022 and 2023 due to improper handling of maliciously crafted SKP files. Specifically, an attacker can exploit this flaw by creating a specially designed SKP file that triggers a use-after-free condition, potentially allowing for unauthorized code execution within the application. Users of Autodesk Navisworks are encouraged to apply the latest security updates provided by Autodesk to mitigate this risk.

References