CVE-2023-25005 - A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability

Back Back to CVE browser

HIGH

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability

Published May 12, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.22%

Description

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability.

Affected products

Vendor n/a Product Autodesk InfraWorks Default
n/a
- Version
  2023, 2021
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Autodesk InfraWorks

n/a

Version	Status	Constraints
2023, 2021	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (1)

https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0006
Vendor Advisory

Link	Providers	Tags
https://www.autodesk.com/trust/security-advisories/adsk-sa-2023-0006		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner autodesk

Published May 12, 2023

Updated Jan 27, 2025

Reserved Feb 1, 2023

Link CVE-2023-25005

CISA Vulnrichment

Updated Jan 27, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-25005

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-25005