CVE-2024-12200

Summary

CVE-2024-12200 is a newly disclosed vulnerability affecting Autodesk Navisworks software. Maliciously crafted DWFX files can trigger an Out-of-Bounds Write vulnerability during the parsing process. This issue poses a significant risk as an attacker can exploit it to cause a crash, corrupt data, or execute arbitrary code in the context of the current process. This vulnerability could potentially lead to serious consequences, including data theft or system compromise. It is recommended that users update their software to the latest patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.