CVE-2024-12671 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12200 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-12200

CVE-2024-12200 affects Autodesk Navisworks family (Desktop/Manage/Freedom/Simulate) via parsing of DWFX files. The root cause is an Out-of-Bounds Write in the DWFX parser, which can cause a crash, data corruption, or arbitrary code execution in the context of the vulnerable process. Public refere...

CVE-2024-12199

CVE-2024-12199 describes an Out-of-Bounds Write vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. Practical impact: crash, data corruption, or arbitrary code execution in the current process. Affected products/versions include Navisworks families prior to 2025.4 (Freedom/Ma...

CVE-2024-12198

CVE-2024-12198 is an out-of-bounds write weakness in Autodesk Navisworks related to DWFX file parsing. The vulnerability affects multiple Navisworks lines (Freedom/Manage/Simulate) and can crash, corrupt data, or allow arbitrary code execution in the current process when a malicious DWFX file is ...

CVE-2024-12197

CVE-2024-12197 describes an Out-of-Bounds Write in Autodesk Navisworks when parsing a malicious DWFX file. The underlying issue is improper validation during DWFX parsing, allowing a crafted file to cause a crash, data corruption, or arbitrary code execution in the context of the current process....

CVE-2024-12194 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2024-12194

CVE-2024-12194 is a memory corruption vulnerability in Autodesk Navisworks triggered by parsing DWFX files, enabling arbitrary code execution in the victim process. Affected products include Navisworks variants (Freedom/Manage/Simulate); root cause is DWFX parsing memory-management fault. The vul...

CVE-2024-12193

CVE-2024-12193 concerns Autodesk Navisworks family (Navisworks/Freedom/Simulate/Manage) with a DWFX file parsing flaw that can cause an Out-of-Bounds Write. The vulnerability arises during parsing of DWFX data and, depending on the source, may lead to crash, data corruption, or arbitrary code exe...

CVE-2024-12178

CVE-2024-12178 describes a memory corruption vulnerability in Autodesk Navisworks when parsing a malicious DWFX file. The issue can allow arbitrary code execution in the context of the affected process. Reported as a local vulnerability with low attack complexity and requiring user interaction (p...

CVE-2024-12178 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2024-11422 DWFX File Parsing Vulnerabilities in Autodesk Navisworks Desktop Software

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...