CVE-2024-12671

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Dec 17, 2024
CWE ID 787

Summary

CVE-2024-12671 is a newly disclosed vulnerability affecting Autodesk Navisworks software. Maliciously crafted DWFX files can exploit this issue, leading to an Out-of-Bounds Write vulnerability. An attacker can utilize this flaw to cause a crash or corrupt data in the current process. In extreme cases, arbitrary code execution is possible. Users are advised to update their software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share