CVE-2024-12191

Summary

CVE-2024-12191 is a newly identified vulnerability that affects Autodesk Navisworks. An maliciously crafted DWFX file can cause an Out-of-Bounds Write issue when parsed by the software. This flaw can be exploited by an attacker to induce a crash, corrupt data, or even execute arbitrary code in the context of the current process. Successful exploitation of this vulnerability could lead to significant consequences, including unauthorized access or system compromise. Users are strongly advised to update their Autodesk Navisworks installation as soon as a patch is available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.