Out-of-Bounds Write Vulnerability in Autodesk Navisworks

CVE-2024-12197

Summary

CVE-2024-12197 is a high-risk vulnerability found in Autodesk Navisworks that stems from improper handling of specially crafted DWFX files. When these files are parsed, they can lead to an Out-of-Bounds Write condition. This flaw can result in application crashes, potential data corruption, and allow attackers to execute arbitrary code within the context of the application. Organizations using affected versions of Autodesk Navisworks must promptly assess their exposure to this vulnerability and apply necessary updates to mitigate risks. For more detailed information and mitigation strategies, refer to Autodesk's security advisory.

References