CVE-2024-12197

Summary

CVE-2024-12197 is a newly disclosed vulnerability that affects Autodesk Navisworks software. A specially crafted DWFX file can trigger an Out-of-Bounds Write vulnerability during the parsing process. This issue can lead to software crashes or data corruption, and potentially, the execution of arbitrary code within the context of the current process. Malicious actors may exploit this vulnerability to gain unauthorized access or cause significant damage to affected systems. Users are strongly advised to update their Autodesk Navisworks software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.