CVE-2024-11422

published 2024-12-17

CVE-2024-11422: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force an Out-of-Bounds Write vulnerability. A malicious actor can leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
autodesk	navisworks	>= 2025 < 2025.4	2025.4
autodesk	navisworks_freedom	>= 2025 < 2025.4	2025.4
autodesk	navisworks_manage	>= 2025 < 2025.4	2025.4
autodesk	navisworks_simulate	>= 2025 < 2025.4	2025.4

CWE-787