CVE-2024-12179

🗓️ 17 Dec 2024 15:19:29Reported by autodeskType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 45 Views

Heap-based Overflow in Autodesk Navisworks due to malicious DWFX file parsing vulnerabilities.

Reporter	Title	Published	Views	Family All 14
Tenable Nessus	Autodesk Navisworks Freedom 25.0.x < 2025.4 Multiple Vulnerabilities (adsk-sa-2024-0027)	20 Dec 202400:00	–	nessus
Tenable Nessus	Autodesk Navisworks Manage 25.0.x < 2025.4 Multiple Vulnerabilities (adsk-sa-2024-0027)	20 Dec 202400:00	–	nessus
Tenable Nessus	Autodesk Navisworks Simulate 25.0.x < 2025.4 Multiple Vulnerabilities (adsk-sa-2024-0027)	20 Dec 202400:00	–	nessus
BDU FSTEC	The vulnerability of the DWFX software file used for viewing 3D models and project documents in Autodesk Navisworks Freedom; the software for modeling and analyzing 3D models in Autodesk Navisworks Simulate; and the software for analyzing, coordinating, and verifying 3D models and project data in Autodesk Navisworks Manage. This allows a malicious individual to cause service interruptions or execute arbitrary code.	8 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-12179	17 Dec 202415:20	–	circl
CNNVD	Autodesk Navisworks 安全漏洞	17 Dec 202400:00	–	cnnvd
Cvelist	CVE-2024-12179 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software	17 Dec 202415:19	–	cvelist
EUVD	EUVD-2024-50653	3 Oct 202520:07	–	euvd
NVD	CVE-2024-12179	17 Dec 202416:15	–	nvd
OSV	CVE-2024-12179	17 Dec 202416:15	–	osv

NVD

Node

autodesk navisworksRange2025–2025.4

[
  {
    "cpes": [
      "cpe:2.3:a:autodesk:navisworks_freedom:2025:*:*:*:*:windows:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Navisworks Freedom",
    "vendor": "Autodesk",
    "versions": [
      {
        "lessThan": "2025.4",
        "status": "affected",
        "version": "2025",
        "versionType": "custom"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:autodesk:navisworks_simulate:2025:*:*:*:*:windows:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Navisworks Simulate",
    "vendor": "Autodesk",
    "versions": [
      {
        "lessThan": "2025.4",
        "status": "affected",
        "version": "2025",
        "versionType": "custom"
      }
    ]
  },
  {
    "cpes": [
      "cpe:2.3:a:autodesk:navisworks_manage:2025:*:*:*:*:windows:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Navisworks Manage",
    "vendor": "Autodesk",
    "versions": [
      {
        "lessThan": "2025.4",
        "status": "affected",
        "version": "2025",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
autodesk	www.autodesk.com/trust/security-advisories/adsk-sa-2024-0027

26 Aug 2025 16:53Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

EPSS0.00508

SSVC