Out-of-Bounds Write Vulnerability in Autodesk Navisworks
CVE-2024-11422
7.8HIGH
Key Information:
- Vendor
Autodesk
- Vendor
- CVE Published:
- 17 December 2024
What is CVE-2024-11422?
CVE-2024-11422 identifies a critical security vulnerability in Autodesk Navisworks, where a specially crafted DWFX file can trigger an Out-of-Bounds Write. This vulnerability may allow an attacker to cause application crashes, corrupt data, or even execute arbitrary code within the context of the current user process. Users are advised to avoid opening untrusted DWFX files and to update to the latest patched versions to mitigate potential risks.
Affected Version(s)
Navisworks Freedom Windows 2025 < 2025.4
Navisworks Manage Windows 2025 < 2025.4
Navisworks Simulate Windows 2025 < 2025.4