CVE-2024-12179

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 17, 2024
CWE ID 122

Summary

CVE-2024-12179 is a newly disclosed vulnerability affecting Autodesk Navisworks. A specially crafted DWFX file can trigger a Heap-based Overflow issue during the parsing process. This flaw could potentially be exploited by malicious actors to cause a crash, read confidential data, or execute arbitrary code in the current process. Users are advised to update their Autodesk Navisworks installation as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Autodesk Navisworks Simulate
  • Navisworks Freedom
  • Navisworks Manage

Affected Vendors

  • Autodesk