Heap-Based Overflow in Autodesk Navisworks from Malicious DWFX Files

CVE-2024-12179

What is CVE-2024-12179?

CVE-2024-12179 describes a critical heap-based overflow vulnerability within Autodesk Navisworks, triggered by the processing of specially crafted DWFX files. Malicious actors can exploit this weakness to potentially crash the application, gain unauthorized access to sensitive data, or execute arbitrary code within the process. Ensuring your software is updated and secure can help mitigate the risks associated with this vulnerability. For more details, please refer to Autodesk's security advisory.

References