← Database

CVE-2022-27872

HIGH CVSS: 7.8 Published: 2022-06-21 Modified: 2026-06-17

Description

A maliciously crafted PDF file may be used to dereference a pointer for read or write operation while parsing PDF files in Autodesk Navisworks 2022. The vulnerability exists because the application fails to handle a crafted PDF file, which causes an unhandled exception. An attacker can leverage this vulnerability to cause a crash or read sensitive data or execute arbitrary code.

Affected Platforms

Autodesk Navisworks

Weakness Type

CWE-755

References