CVE-2024-12199

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12199 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12199

CVE-2024-12199 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. Practical impact: crash, data corruption, or arbitrary code execution in the current process. Affected products/versions include Navisworks families prior to 2025.4 (Freedom/Ma...