CVE-2024-12198

Summary

CVE-2024-12198 is a newly disclosed vulnerability that affects Autodesk Navisworks. Maliciously crafted DWFX files can cause an Out-of-Bounds Write vulnerability when parsed by the software. This issue can result in a crash or data corruption, and potentially allow a malicious actor to execute arbitrary code in the context of the current process. Users are strongly encouraged to update their Autodesk Navisworks software as soon as a patch becomes available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.