CVE-2024-12200: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this…

high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, may force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
autodesk	navisworks	>= 2025 < 2025.4	2025.4
autodesk	navisworks_freedom	>= 2025 < 2025.4	2025.4
autodesk	navisworks_manage	>= 2025 < 2025.4	2025.4
autodesk	navisworks_simulate	>= 2025 < 2025.4	2025.4