CVE-2024-12191

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12191

creationtimestamp| type| source ---|---|--- 2024-12-17 15:35:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113668896703171569 2024-12-17 17:36:47+00:00| seen| https://t.me/cvedetector/13103 2024-12-19 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-24-1704/...

CVE-2024-12191 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12191

CVE-2024-12191 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing DWFX files. The issue can cause a crash, data corruption, or arbitrary code execution in the process context. Published sources (NVD, Red Hat advisory, ZDI) align on the DWFX parsing root cause and i...