CVE-2024-12200

CVE-2024-12200 affects Autodesk Navisworks family (Desktop/Manage/Freedom/Simulate) via parsing of DWFX files. The root cause is an Out-of-Bounds Write in the DWFX parser, which can cause a crash, data corruption, or arbitrary code execution in the context of the vulnerable process. Public refere...