CVE-2024-12671
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Dec 17, 2024
CWE ID 787
Summary
CVE-2024-12671 is a newly disclosed vulnerability affecting Autodesk Navisworks software. Maliciously crafted DWFX files can exploit this issue, leading to an Out-of-Bounds Write vulnerability. An attacker can utilize this flaw to cause a crash or corrupt data in the current process. In extreme cases, arbitrary code execution is possible. Users are advised to update their software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share