CVE-2024-12670: A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can…

high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

A maliciously crafted DWFX file, when parsed through Autodesk Navisworks, can be used to cause a Heap-based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
autodesk	navisworks	>= 2025 < 2025.4	2025.4
autodesk	navisworks_freedom	>= 2025 < 2025.4	2025.4
autodesk	navisworks_manage	>= 2025 < 2025.4	2025.4
autodesk	navisworks_simulate	>= 2025 < 2025.4	2025.4