CVE-2024-12178
DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software
A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.
Reserved 2024-12-04 | Published 2024-12-17 | Updated 2024-12-17 | Assigner autodeskCWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
autodesk.com/trust/security-advisories/adsk-sa-2024-0027
Support options
