CVE-2024-12178: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this…

PriorityP340high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

EPSS

0.33%

24.6th percentile

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
autodesk	navisworks	>= 2025 < 2025.4	2025.4
autodesk	navisworks_freedom	>= 2025 < 2025.4	2025.4
autodesk	navisworks_manage	>= 2025 < 2025.4	2025.4
autodesk	navisworks_simulate	>= 2025 < 2025.4	2025.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.